Privacy Policy

1. What data we collect

When you create an account, we collect your name, email address, and billing details (handled securely by Stripe — we never store card numbers).

When you use Adminalyse to manage your business, the following data is stored on your behalf: client names, addresses, and contact details; job details and notes; staff records and visit logs; quotes and invoices.

We also collect basic usage data (pages visited, feature usage) to improve the product, and technical data such as IP address and browser type for security purposes.

2. Why we collect it (lawful basis)

Account and billing data is processed to perform our contract with you (GDPR Art. 6(1)(b)). Business data you enter (clients, jobs, etc.) is processed on your instruction as a data processor acting on your behalf. Usage analytics are processed under our legitimate interests in improving the product (Art. 6(1)(f)).

3. Who we share it with

We do not sell your data. We share data only with the following sub-processors, each under a Data Processing Agreement:

• Supabase Inc — database hosting (EU region) • Stripe Inc — payment processing • Resend Inc — transactional email delivery • Vercel Inc — application hosting

A full list of sub-processors is available on request.

4. Where your data is stored

Our database is hosted in the EU (Supabase EU region). All data is encrypted at rest and in transit. If you are based in the UK, your data remains within the UK/EU adequacy framework.

5. How long we keep it

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 90 days. Billing records are retained for 7 years for legal compliance. You can request deletion at any time (see below).

6. Your rights

Under UK GDPR you have the right to: • Access the data we hold about you • Correct inaccurate data • Delete your data ("right to be forgotten") • Export your data in a portable format • Object to processing based on legitimate interests

To exercise any of these rights, email privacy@adminalyse.com. We will respond within 30 days.

7. Cookies

We use strictly necessary cookies for authentication only (keeping you logged in). We do not use advertising or tracking cookies. See our Cookie Policy for details.

8. Security

We use row-level security (RLS) to ensure tenant data isolation — your data is never accessible to other Adminalyse customers. All connections use TLS encryption. Access controls limit data to authorised staff only.

9. Contact

For privacy questions or to exercise your rights, contact us at privacy@adminalyse.com.

If you are not satisfied with our response, you have the right to complain to the ICO at ico.org.uk.