Privacy notice

Draft for the proof of concept. To be completed and reviewed before commercial launch.

What we hold

Your email address and name; how you sign in (we never see your password or Google password); your projects, cases, calculation inputs and results; your credit balance, credit movements and payments (card details are held by Stripe, never by us); your sessions (time, IP address, browser) and a security log of important actions.

Why

To provide the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interests), and to keep accounting records (legal obligation).

Where and who

All data is stored in the United Kingdom (AWS, London). Our processors are Amazon Web Services (hosting and sign-in) and Stripe (payments).

How long

Account data until you delete your account; sessions for at most two weeks; application logs for 30 days; the security log for two years; payment and credit records for six years, without your name or email.

Your rights

You can download all your data and delete your account from the Account page. You can also ask us for access, correction, restriction or erasure, and complain to the Information Commissioner's Office.

Cookies

We use only strictly necessary cookies: one for your signed-in session and one, briefly, while you sign in. No analytics or advertising cookies.