Terms-inator Privacy Notice

This privacy notice tells you what to expect us to do with your personal information.

Last Updated: July 15, 2025

Contact Details

Email: privacy@terms-inator.co.uk

What Information We Collect, Use, and Why

We collect or use the following information to provide services:

  • Names and contact details
  • Addresses
  • Purchase or account history
  • Account information
  • Website user information (including browser, country, user interactions)
  • Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts:

  • Names and contact details
  • Addresses
  • Purchase history
  • Account information, including registration details
  • Information used for security purposes

We collect or use the following information for service updates or marketing purposes:

  • Names and contact details
  • Marketing preferences
  • Location data (country only)
  • Website and app user interaction information
  • Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

  • Name
  • Contact information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Account information
  • Purchase or service history
  • Correspondence
  • User feedback on usefulness of specific analysis provided by the service

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

Your Data Protection Rights

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our Lawful Bases for the Collection and Use of Your Data

Our lawful bases for collecting or using personal information to provide services are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract - we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation - we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests - we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

Our Legitimate Interests

Users can save notes or submit feedback on specific insights shared by our document analysis tool, for the purpose of providing them additional value or for the purposes of helping us improve the quality and accuracy of the tool, and may include communication with the user about their feedback. These are processed only for these purposes, and except when communicating directly with the user, details are processed anonymously.

Where We Get Personal Information From

  • Directly from you
  • Website Analytics (our own)

How Long We Keep Information

You may delete your documents, data and account at any time.

We retain uploaded terms and conditions documents for at least one (1) year from the date of upload. After this period, we may delete your documents unless you have amended your account settings to request extended retention.

Accounts that remain inactive for one (1) year or more may be deleted at our discretion. Inactivity is measured from your last login to the Service. Before deletion, users will receive an email notification with thirty (30) days' notice stating that they need to login or their account will be deleted.

Upon termination or cancellation of your account (whether by you or us), your right to use the Service ceases immediately, and any unused credits will be lost and cannot be recovered. Account information will be deleted within one (1) month of termination, and from backups after 90 days from date of deletion.

Who We Share Information With

Data Processors

AI Platform - Gemini-2.0-Flash Large Language Model (LLM), UK/US

This data processor does the following activities for us: They process the terms documents submitted by users, with appropriate localisation (US, UK English).

Payment Processing - Stripe, US

This data processor does the following activities for us: Stripe process personal information and payment details for the purposes of collecting payments for our product/services.

Database - AWS, UK

This data processor does the following activities for us: AWS holds our databases which includes personal information for the purposes of managing your account and providing our services.

Email - Fasthosts, UK

This data processor does the following activities for us: Fasthosts provides our email platform for sending and receiving emails which may hold personal information for the purposes managing your account, providing our services and dealing with queries, complaints or claims.

Others We Share Personal Information With

  • Organisations we're legally obliged to share personal information with
  • Publicly on our website, social media or other marketing and information media where you've given explicit consent for us to do so

Sharing Information Outside the UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Deepmind (Google)

Category of recipient: AI Large Language Model (LLM)

Country the personal information is sent to: US

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)

Stripe

Category of recipient: Payment Processor

Country the personal information is sent to: US

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

How to Complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

The ICO's address:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint/