Privacy policy
What data we collect, why, and how to ask us to delete or export it.
Effective 2026-05-15.
1. Who is the controller
Aleejy AI (United Kingdom) is the data controller for marketing/account-administration data (your name, work email, the company you said you were enquiring on behalf of) and a processor for operational data held inside your tenant.
2. What we collect
Account details: name, email, phone (optional), organisation membership, role. Operational records: anything you enter inside the product — sites, assets, registers, inspections, findings, actions, incidents, documents, contractors. Technical logs: IP address, browser user-agent and timestamps for security forensics.
3. Lawful basis
Performance of contract (the subscription itself) for the operational records, and legitimate interests (running the product securely, responding to enquiries) for the technical logs. For marketing emails to non-customers we rely on consent — every email has an unsubscribe link.
4. Sub-processors
We use Vercel (application hosting and edge CDN, UK/EU), Supabase (database, authentication, file storage — eu-west-1), and Resend (transactional email). We do not share customer data with any other third party. An up-to-date sub-processor list is on the security page.
5. International transfers
Personal data stays within the UK/EU. Where any sub-processor has US-affiliated infrastructure we rely on the UK extension to the EU-US Data Privacy Framework and standard contractual clauses as appropriate.
6. Retention
Active accounts: as long as the contract is in place. Closed accounts: three months from termination, then permanent deletion. Activity log: retained for the life of the account (used for audit and compliance evidence).
7. Your rights
You can ask us to access, correct, export or delete your personal data at info@jonnyai.co.uk. We aim to respond within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
8. Cookies
We use a small number of strictly-necessary cookies (auth session, theme preference). We do not run third-party advertising or analytics cookies. See the cookie policy.
9. Changes
Material changes are announced to the registered super-admin email at least 14 days before they take effect.