Privacy Policy

Who is responsible

[to be confirmed: entity name] (trading as Handled), [to be confirmed: registered address], is responsible for your information. Contact: [to be confirmed: privacy email].

What we collect

Account details: name and email. Business details you give us: name, trade, size, location, website, goals and challenges. What you authorize and the results. Payment records (card details are held by Stripe, never by us). Technical data: shortened IP address, browser type, and security logs. Optional analytics cookies only if you allow them.

We do not ask for sensitive personal information (health, religion, precise location, government ID numbers) and ask you not to enter it.

Why we use it

To provide the service you asked for (contract), to keep accounts secure and prevent abuse (legitimate interest), to meet legal and tax duties (legal obligation), and to send marketing only if you opt in (consent).

AI processing

Your business answers are processed by AI models to produce your review and drafts. See our AI Use & Transparency Notice. You can switch off optional AI processing in your Privacy Center, although the core review needs it.

Who we share it with

Only the service providers listed on our Third-Party Services page, bound to use it just for us. We do not sell your personal information and do not share it for cross-context behavioral advertising.

How long we keep it

For as long as your account is open, then as set out in our retention schedule on the Data Protection page. Some records (billing, consent history) are kept longer because the law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your information, to object or restrict use, to withdraw consent, and to opt out of any sale or sharing. California, Virginia, Colorado, Connecticut, Utah, Texas and other US state residents, and visitors from the UK and EU, can use these rights from the Privacy Center or by emailing [to be confirmed: privacy email]. We respond within 45 days and will not treat you differently for using them. You may also complain to your local data protection authority.

We honour Global Privacy Control browser signals as an opt-out of optional cookies and any sharing.

Children

Handled is for businesses and people aged 18 and over. We do not knowingly collect children's information.

International transfers

Our providers are mainly in the United States. Where the law requires, transfers rely on standard contractual safeguards.