Privacy Policy

1. Introduction

Growthify Limited ("we", "us", or "our") operates RiskLens. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Personal Information

• Name and email address
• Organisation name and details
• Payment information (processed by Stripe)
• Profile information you provide

Usage Information

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and preferences

Risk Data

Risk registers, assessments, and related data you upload or create within the Service. This data belongs to you and is processed solely to provide the Service.

3. How We Use Your Information

• To provide and maintain the Service
• To process transactions and send related information
• To send administrative information
• To respond to inquiries and support requests
• To improve our Service
• To comply with legal obligations

4. AI Processing

When you use our AI-powered analysis features, your risk data is processed by third-party AI services (Anthropic Claude). This processing is done to provide mitigation analysis and suggestions. We do not use your data to train AI models.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who assist in our operations
• Professional advisers (lawyers, accountants)
• Authorities when required by law
• Business partners with your consent

6. Data Security

We implement appropriate security measures to protect your data:

• Encryption in transit (TLS) and at rest
• Regular security audits
• Access controls and authentication
• Secure hosting in UK data centres

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us or through your account settings.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

9. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand how the Service is used. You can control cookie preferences in your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

11. Contact Us

For privacy-related inquiries:

Data Protection Officer: [email protected]
Email: [email protected]
Address: Growthify Limited, London, UK