Privacy Policy

• Account: your email address, your name if you add it, and your organisation name.
• Sign-in: one-time sign-in links, session records, and the IP address and browser of each sign-in.
• Authorisations: the full name, title, IP address and time recorded when you sign an authorisation to test.
• Assets and results: the assets you add, ownership-check results, check results, findings, reports and alert history.
• Billing: Stripe handles card details. We keep your Stripe customer ID, subscription status and invoice records, not your card number.
• Logs: an audit log of account actions, kept for security.

• To run the service you signed up for: sign-in, checks, reports and alerts (performing our contract with you).
• To keep a record that every check was authorised (our legal obligations and legitimate interest).
• To take payment (contract).
• To keep the service secure and prevent abuse (legitimate interest).

To write plain-English summaries, we send technical findings about your assets to the AI models we use: Claude, from Anthropic, and GPT-6 Astra, from OpenAI. We do not send your name, your email or your payment details. [Confirm the Anthropic and OpenAI data-processing terms and region before launch.]

We do not sell personal data. We share it only with the providers that run the service:

• Stripe (payments)
• Anthropic (Claude, report summaries)
• OpenAI (GPT-6 Astra, report summaries)
• [Email delivery provider]
• [Hosting provider and location]

Account and asset data are kept while your account is open. Authorisation records and the audit log are kept for [X years] after the asset is removed, so we can show that checks were authorised. Billing records are kept as tax law requires. [Retention periods to be confirmed.]

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Email pending. You can also complain to your local data-protection authority.

Data is encrypted in transit. Sign-in links are single-use and short-lived, and each organisation’s data is kept separate from every other organisation’s.

We use one essential cookie to keep you signed in and to protect forms. We use no advertising or tracking cookies.

We will email you about material changes. Contact: pending, AI Makers LLC, [registered address].