Privacy Notice

• Account data — email address, login credentials managed by our authentication provider, display name, and, if you sign in with Google, the basic profile Google returns. Used to create and secure your account and to provide the service. Legal basis: performance of our contract with you.
• Investigation content — the claims, text, links and screenshots you submit, and the case files produced from them. Used to run and store your investigations and your saved cases. Legal basis: performance of our contract.
• Usage and subscription records — counts of investigations run, plan and trial status. Used to enforce plan limits and entitlements. Legal basis: performance of our contract.
• Technical data — IP address, device and browser information, error and request logs. Used for security, fraud prevention, debugging and service improvement. Legal basis: our legitimate interest in running a secure, reliable service.
• Support messages — what you send us when you get in touch. Used to answer you. Legal basis: legitimate interest.

We do not collect or store payment card details. Payment data is handled by Paddle under its own privacy notice.

• Service providers and subprocessors that host our database, authentication, hosting and logging, and the AI and web-retrieval providers that process investigation text to produce case files.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting providers, where necessary.
• Authorities, where we are legally required to disclose.

We do not sell personal data.

Our providers may process data outside your country, including in Canada, the United States and the European Union. Where data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

Account, investigation and usage data is kept while your account is active. If you close your account we delete or anonymise your personal data, typically within 30 days, except where we must keep records longer for legal, tax or accounting reasons. Technical logs are kept for a short period only.

Depending on where you live, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. If you are in the UK or EEA you may also complain to your supervisory authority. We respond to requests within one month.

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls so that each account can only reach its own records, and server-side enforcement of entitlements. No system is perfectly secure, but we work to protect your data and to notify you where required if something goes wrong.

We use only essential cookies and browser storage needed to keep you signed in, maintain your session and remember an in-progress investigation draft. We do not use advertising or third-party tracking cookies. You can clear this storage in your browser settings, though doing so signs you out.

For any privacy question or request, contact Mark Clement Rose through the support channel in the app or by replying to any email you receive from us.

Terms & Conditions · Refund Policy · Pricing