Privacy Policy

We collect data you provide directly and data generated as you use the Service. We aim to collect only what is needed to operate the Service for you and your workspace.

This includes your name, email address, password (stored only as a secure hash), company name, optional phone number, selected business type, and the workspace, client, contact, and invitation records you create. Where you invite clients or collaborators, we process the contact details you provide for them to deliver the invitation and portal access.

To keep you signed in and to protect your account, we process authentication and session information such as session cookies, sign-in events, and security tokens used for email verification and invitations.

We keep operational logs and, where email features are enabled, delivery metadata such as recipient address, message status, timestamps, and suppression records. Live email delivery is disabled by default; until it is enabled, messages are simulated rather than sent.

We process personal data to:

• create and operate your account and workspace;
• authenticate you and keep the Service secure;
• provide features you use, including client invitations and portals;
• communicate service, security, and account information;
• maintain, troubleshoot, and improve the Service;
• comply with legal obligations.

We rely on a small number of infrastructure providers to run the Service, including application hosting and a managed database. When email, payment, AI, or integration features are explicitly enabled, the relevant provider (for example an email delivery, payment, or AI provider) will process the data necessary to perform that function. Until such a feature is enabled, no data is shared with that provider. We use providers only under appropriate confidentiality and data-processing terms.

We retain personal data for as long as your account or workspace is active and as needed to provide the Service, then for a reasonable period afterwards to meet legal, security, and accounting requirements. Trial or workspace data may be deleted after the relevant period.

We use technical and organisational measures to protect personal data, including encrypted transport, hashed passwords, access controls, and workspace data isolation. No method of transmission or storage is completely secure, but we work to protect your information and to respond to incidents appropriately.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on consent. To make a request, contact us at support@mycompany.ltd. We may need to verify your identity before acting on a request.

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will take appropriate steps to remove it.

For privacy questions, requests, or grievances, contact us at support@mycompany.ltd. We will respond within a reasonable timeframe and in accordance with applicable law in the United Kingdom.

We may update this Privacy Policy from time to time. When we make material changes we will update the "last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.