Privacy policy
Who we are
This service is operated by [PENDING: legal entity name], registered in England and Wales at [PENDING: registered address]. In this policy, “we” and “us” mean that company, and “the service” means this website and the application it describes.
If you have any question about this policy or about your data, contact us at [PENDING: contact email].
What this policy covers
This policy covers two distinct kinds of data, and we treat them differently:
- Data about you, the person or business holding an account with us. For this data, we are the controller.
- Data you upload into your workspace about your own customers. For this data, you are the controller and we are your processor. We process it only on your instructions and only to provide the service.
Your account data
When you sign up we collect your email address, a password, and the name you give your workspace. Your password is handled by our authentication provider and is never visible to us. We also hold routine records of sign-ins generated by the authentication system.
We use this data to operate your account, keep your workspace secure, and contact you about the service. We do not sell it, share it for marketing, or use it to build advertising profiles.
The customer records you upload
The service works on records you choose to upload: your customer list, your products and prices, and which customer holds which product. These records may include personal data, such as the names of account owners at your customers.
You remain the controller of this data. We act as your processor: we store it, run the analysis you ask for, and show you the results. We do not use one customer’s uploaded data to serve another customer, and we do not use it to train models or build benchmarks.
Where your data lives
All service data is stored with Supabase, our database and authentication provider, hosted in the European Union (Ireland). Access within the service is isolated per workspace at the database level, so one organisation’s data is never visible to another.
Cookies
The service sets only the cookies that are strictly necessary to keep you signed in. These are authentication session cookies set by our authentication provider.
There are no analytics cookies, no tracking pixels, no advertising cookies and no third-party marketing scripts anywhere on this site or in the application. Because we set no optional cookies, there is no cookie consent banner to click through.
Retention and deletion
We keep your data for as long as your account is active.
If you trial the service with the built-in sample dataset, you can remove all sample records from your workspace in a single action at any time.
You can ask us to delete your uploaded customer records, or your entire account and workspace, at any time by contacting us at [PENDING: contact email]. Deletion on request is a standing commitment of how we run this service, including during free audits and pilots.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, and to receive a copy of it in a portable format.
To exercise any of these rights, contact us at [PENDING: contact email]. We will respond within one calendar month.
If you believe we have mishandled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Sub-processors
We use the following sub-processor to provide the service:
- Supabase: database, authentication and storage. Hosted in the European Union (Ireland).
If we add an application hosting provider or any other sub-processor, we will list it here before it processes customer data.
ICO registration
[PENDING: ICO registration number. Registration will be completed under the operating entity before the service processes external customer data.]
Changes to this policy
If this policy changes in a way that matters, we will say so plainly on this page and update the date at the top. We will not bury meaningful changes.
Contact
[PENDING: contact email], or in writing to [PENDING: registered address].