Privacy & data

What we collect

• Your work email, used to sign you in and scope your data to your firm.
• The promotion text and context you submit for review.
• An audit record of each review: the assessment, the findings, the rule-set version, a short text preview, and a cryptographic hash of the submitted text.

How we use it

Submitted text is sent to the configured language-model provider to produce the review, and the review is stored in your firm’s audit trail so you can evidence what was checked and when. We do not sell your data or use your submitted promotions to train models.

Data minimisation

The audit trail deliberately stores a short preview and a hash of each promotion rather than the full text where the full text is not needed, keeping no more than a review requires.

Sub-processors and processing region

Reviews are produced by Anthropic (Claude), processed in the United States. Anthropic does not use data submitted through its API to train its models, and we do not use your submitted promotions to train models. If US processing does not meet your data-residency requirements, a UK/EU or self-hosted model can be arranged on the Firm plan; contact us before submitting production data. Hosting is provided by Vercel.

Retention

Audit records are retained for six years, then deleted or anonymised. This period reflects the FCA’s financial-promotion record-keeping expectations (COBS 4.11.2R, with COBS 4.11.3G indicating a period of at least six years) and the general six-year limitation period, balanced against the UK GDPR storage-limitation principle (Article 5(1)(e)). Your work email and account data are kept only while your account is active. You can request export or deletion of your firm’s records at any time.

Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, and portability over personal data. To exercise them, contact satyawansingh82@hotmail.com. If you are not satisfied you may complain to the Information Commissioner’s Office (ICO).