Legal
Privacy policy
Last updated 19 August 2026
The short version
We collect what we need to run your analysis and to reply to your enquiry, and nothing else. We do not sell your data. We do not pass enquiry details to brokers, captive managers, domiciles, or anyone who might pay us for the introduction — which is the whole point of an independent platform, and would be worthless if we monetised the leads instead.
What we collect
Enquiry details. Your name, work email, optionally your company, your area of interest, and any message you write. Used to respond to you and to understand which parts of the platform people are actually interested in.
Account identity. If you sign in, we receive an identifier, your name, and your email address from the authentication provider. We store no password.
Study data. Everything you enter into a study: company profile, exposure values, loss history, premiums, retention preferences, and balance-sheet figures. This is commercially sensitive and is treated as such.
Audit vault records. A timestamped, hash-chained record of your inputs and assumption choices. This exists so the study can withstand examination. It is append-only by design, which has a privacy consequence worth stating plainly: individual audit entries cannot be edited or selectively removed without destroying the integrity of the chain. Deleting a study removes its audit trail in full.
Usage analytics. Aggregate page views and visitor counts. No profiling, no advertising identifiers, no cross-site tracking.
Who we share it with
Nobody, other than the infrastructure providers we need to operate: hosting, the managed database, and the authentication provider. They process data on our instructions and for no other purpose.
If you use the AI assistant, the text of your question is sent to a large language model provider to generate the answer. Do not put confidential loss data or identifying company details into the chat. Your study data is not sent to the model — the assistant answers questions about captive concepts and how the platform works, and has no access to your figures.
We will disclose data if legally compelled, and we will tell you unless prohibited from doing so.
How long we keep it
Study data and audit vault entries are kept for as long as your account exists, because a feasibility study you cannot retrieve three years later is of little use when an examiner asks about it. Enquiry records are kept for two years.
You can ask us to delete your account and all associated studies at any time. That deletion is complete and irreversible, including the audit trail.
Your rights
You can request a copy of your data, correction of anything inaccurate, or deletion. Depending on where you live you may have additional statutory rights, including under the GDPR or the CCPA. We honour those requests regardless of whether a statute compels us to.
Study data is exportable as a report at any time from within the platform, without needing to ask us.
Security
Data is encrypted in transit. Study data is accessible only to the account that created it — every procedure that reads a study verifies ownership before returning anything. We do not claim to be impenetrable, because nobody honestly can.
Contact
For any privacy question or request, use the enquiry form on the pricing page and mark it as a privacy matter. We answer these ourselves rather than routing them to a queue.