Claim data: journey details you record (route, dates, delay length, notes).
Support messages: anything you send us for help.
Technical data: IP address, device and browser information, log data, and basic usage telemetry.
Cookies: essential session cookies. See section 8.
Payment card details are collected and processed by our payment processor (Stripe), not by us. We receive only a customer identifier and subscription status.
3. Why we use it
To create and secure your account (contract performance).
To provide the claim-tracking service (contract performance).
To prevent fraud, abuse, and security incidents (legitimate interests).
To improve the product and fix bugs (legitimate interests).
To respond to support requests (contract performance).
To meet legal obligations (legal obligation).
4. Who we share it with
Hosting and infrastructure providers that run the Service on our behalf.
Stripe, our payment processor, for card processing, fraud prevention, tax calculation, and invoicing.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.
5. International transfers
Some of our providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) as the safeguard.
6. Retention
We keep account and claim data for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we must keep it for legal, tax, or fraud-prevention reasons.
7. Your rights (UK GDPR)
You have the right to:
access a copy of your personal data;
have inaccurate data corrected;
have your data erased;
restrict or object to processing;
data portability;
withdraw consent at any time where processing is based on consent;
lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
We respond to rights requests within one month.
8. Cookies
We use essential cookies to keep you signed in and to protect the Service. We do not currently use advertising or third-party marketing cookies. If this changes, we will update this notice and provide a preferences control.
9. Security
We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls, and least-privilege service credentials.
10. Contact
Privacy questions or rights requests: contact cortexlabs__ via the in-app support channel.
