Data Protection & Processing
Version 1.0 · Effective 2026-10-01 · Awaiting final legal review
In short: How your information is classified, protected, retained and deleted — and our Data Processing Addendum for business customers.
How we classify information
Public; Business information; Personal information; Sensitive personal information (not collected); Payment information (held by Stripe); Authentication and security information; Confidential business information; AI-generated analysis; Third-party and provider information. We collect only what the service needs and use it only for the purpose it was given.
Retention
The live retention schedule — what we keep, why, for how long and what happens on deletion — is shown below this document.
Data Processing Addendum
Where you give us personal information about your own customers or staff, we act as your processor: we use it only on your instructions, keep it confidential, protect it with the measures on our Security page, use only the sub-processors we list (with notice of changes), help you answer rights requests, tell you without undue delay of any breach affecting it, and delete or return it when you leave. A signed copy is available on request from [to be confirmed: privacy email].