Privacy Policy

1. Introduction

FairDeal is committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information in compliance with UK GDPR and Data Protection Act 2018.

2. Information We Collect

Personal Information:

• Name and email address (when you create an account)
• Password (encrypted and never stored in plain text)
• Login and usage activity

Document Data:

• Uploaded documents (bills, contracts, agreements)
• Extracted information from documents
• Analysis results and recommendations

Technical Data:

• IP address and browser information
• Device type and operating system
• Usage patterns and preferences

3. How We Use Your Information

We use your information to:

• Provide and improve our document analysis service
• Process and analyze your uploaded documents
• Manage your account and subscription
• Communicate with you about the service
• Ensure security and prevent fraud
• Comply with legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: To provide the service you've signed up for
• Legitimate Interest: To improve our service and ensure security
• Consent: When you've given explicit consent for specific purposes
• Legal Obligation: When required by law

5. Data Storage and Security

We take security seriously:

• Documents are encrypted in transit and at rest
• Passwords are hashed using industry-standard encryption
• Access to data is strictly controlled and monitored
• Regular security audits and updates
• Secure cloud storage infrastructure

6. Data Retention

Free Tier Users: Documents and analysis are automatically deleted after 90 days.

Premium Users: Data retained for the duration of your subscription plus 30 days.

Account Data: Retained until you request deletion or close your account.

7. Third-Party Services

We use the following third-party services:

• AI Analysis: Document processing through secure AI APIs
• Cloud Storage: Secure document storage
• Authentication: Google OAuth for optional sign-in
• Payment Processing: (When available) PCI-compliant payment processors

All third parties are GDPR-compliant and bound by data processing agreements.

8. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

9. Cookies and Tracking

We use essential cookies to:

• Keep you logged in
• Remember your preferences
• Ensure security
• Analyze usage (anonymized)

You can control cookies through your browser settings.

10. International Transfers

Your data is primarily stored in the UK/EU. If data is transferred internationally, we ensure adequate safeguards are in place through standard contractual clauses or equivalent mechanisms.

11. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes via email or in-app notification.

13. Contact Us

For privacy-related questions, data access requests, or to exercise your rights, please contact us through your account settings or visit our support page.

14. Supervisory Authority

If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk