Privacy Policy

Last updated: 29 April 2026

This Privacy Policy explains how Supabot AI ("we", "us", "our") collects, uses, and protects your personal data when you use ClearCheck. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Supabot AI is the data controller for personal data processed through ClearCheck. You can contact us at connect@supabotai.com.

2. What Data We Collect

Data	Purpose	Legal Basis
Email address	Account creation, login, and communication	Contract performance
Payment information	Processing Pro subscriptions (handled by Stripe)	Contract performance
Company search history	Recent searches feature (stored locally in your browser)	Legitimate interest
Usage data (checks used)	Enforcing free tier limits and Pro plan access	Contract performance
IP address and device data	Security, fraud prevention, and service operation	Legitimate interest

3. What We Do Not Collect

• We do not store the Companies House data you look up — results are fetched in real time and not retained on our servers
• We do not sell your personal data to third parties
• We do not use your data for advertising purposes
• We do not use cookies for tracking

4. Company Data

ClearCheck displays information about companies and their officers sourced from Companies House. This is publicly available data held on the UK register of companies. We do not add to, alter, or re-sell this data. Information about company officers (directors) is public record and is displayed solely for the purpose of company due diligence.

5. Third-Party Services

We use the following third-party services to operate ClearCheck:

• Supabase — user authentication and account data storage (EU-based servers)
• Stripe — payment processing (Stripe's privacy policy applies to payment data)
• Resend — transactional email delivery
• Companies House API — source of company data (UK government service)

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is permanently deleted within 30 days. Stripe may retain payment records for longer periods as required by financial regulations.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your account and personal data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Restriction — request that we limit how we use your data

To exercise any of these rights, contact us at connect@supabotai.com. We will respond within 30 days.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted storage, HTTPS transmission, and access controls. However, no method of transmission over the internet is completely secure.

9. Children

ClearCheck is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of the Service after changes are posted constitutes acceptance.

11. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact

For any privacy-related queries, contact us at connect@supabotai.com.