Legal

Privacy Policy

Last updated: 5 August 2026

In short: We collect your email (via Google Sign-In), payment details (handled by Stripe, we never see your card number), and the documents you upload for analysis. Documents are deleted automatically after 30 days and are never used to train AI models. Your document is sent to Anthropic (who make the Claude AI model) to generate your analysis, that's the only third party who sees its contents. We don't sell your data to anyone.

1. Who we are

Claspa (claspa.co.uk) is operated by Dexter, trading as Claspa, a sole trader based in the United Kingdom. For the purposes of UK data protection law, Claspa is the "controller" of the personal information described in this policy. Throughout this policy, "Claspa", "we", "us", and "our" refer to this business, and "you" refers to anyone using the service.

2. What this policy covers

This policy explains what personal information Claspa collects, why, how long we keep it, who we share it with, and the rights you have over it. It applies to claspa.co.uk and the Claspa service generally. It doesn't cover cookies specifically, that's in our separate Cookie Policy.

3. Information we collect

Account information: if you sign in, we receive your name, email address, and profile picture from Google Sign-In. We don't receive or store your Google password.

Payment information: when you pay for a report or subscription, payment is handled entirely by Stripe. We receive confirmation that payment succeeded and basic details like the amount and which pricing tier, but we never see or store your card number.

Your uploaded documents: the contract or document you upload for analysis, along with the analysis Claspa generates from it.

Usage information: basic technical information about how Claspa is used, for example that a visit happened, so we can understand real usage of the site. This is not tied to your identity unless you're signed in.

4. How we use your information

We use your account information to let you sign in, show you your own history and subscriptions, and verify you're entitled to access things like a report you've paid for. We use payment information to process payments, prevent fraud, and handle refunds or disputes. We use your uploaded documents solely to generate the analysis you've asked for. We use usage information to keep the service running reliably and understand how it's actually used.

Where UK GDPR requires us to identify a legal basis: processing your documents and payment is necessary to perform the contract you enter into when you use Claspa; some usage information is processed under our legitimate interest in running and improving the service; and where you've signed in with Google, that's based on your consent to that sign-in.

5. Your uploaded documents specifically

Your document is used only to generate your analysis. It is automatically and permanently deleted from our systems 30 days after upload. We do not use your documents, or any part of their content, to train AI models, and we do not sell or share your documents with third parties, other than the AI provider used to generate your analysis (see Section 6), who processes it solely for that purpose and does not use it to train their own models either.

If your document contains personal information about other people, for example named tenants in a tenancy agreement, or a counterparty's contact details, that information is handled under this same policy and deleted on the same 30-day schedule.

6. Who we share your information with

We share information with a small number of service providers who help us run Claspa, each only receiving what they need to do their specific job:

Stripe — processes payments and subscriptions. Stripe receives your payment details directly; we don't handle your card number ourselves.

Anthropic — the company behind the Claude AI model that generates your analysis. Your document's content is sent to Anthropic's API solely to produce your report.

Google — provides the sign-in service, if you choose to sign in that way.

Netlify — hosts the Claspa website and stores data (like your history and uploaded documents, before their 30-day deletion) on our behalf.

None of these providers are permitted to use your information for their own purposes beyond providing their service to us. We do not sell your personal information to anyone, and we do not share it for advertising purposes.

7. International transfers

Some of the providers listed in Section 6, including Anthropic, are based in the United States rather than the UK or EU. Where we transfer personal information outside the UK, we rely on appropriate safeguards recognised under UK data protection law to ensure your information continues to receive a comparable level of protection.

8. How long we keep your information

Uploaded documents and their analyses are deleted 30 days after upload. If you're signed in and your analysis is genuinely unlocked (paid for, or covered by a subscription), a lightweight history entry, not the full document, is kept so you can revisit your reports; you can delete any individual entry yourself at any time. Account information is kept for as long as you have an account with us. Payment records are kept for as long as we're legally required to for tax and accounting purposes, generally several years, even after an account is closed.

9. Cookies

Claspa uses a small number of cookies, essential ones to keep the service secure and working properly, not for tracking or advertising. Full details are in our Cookie Policy.

10. Your rights

Under UK GDPR, you have the right to: access the personal information we hold about you; have inaccurate information corrected; ask us to delete your information (though note that a report you've already paid for may need to be retained for accounting purposes); object to or restrict certain processing; and receive your information in a portable format. To exercise any of these, contact us using the details in Section 13.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we've handled your information incorrectly. We'd appreciate the chance to put things right directly first, but you're not required to contact us before complaining to the ICO.

11. Keeping your information secure

We take reasonable technical and organisational steps to protect your information, including relying on established, reputable providers (Stripe, Google, Netlify, Anthropic) who maintain their own security standards for the parts of the service they handle. No method of transmission or storage is completely secure, but we work to protect your information appropriately for what it is.

12. Children's privacy

Claspa is not directed at, and is not intended to be used by, anyone under 18. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time, for example to reflect changes to the service or to applicable law. We'll update the date at the top of this page when we do. If a change is significant, we'll make reasonable efforts to make that clear.

14. Contact us

Questions about this policy, or requests relating to your personal information, can be sent to support@claspa.co.uk, or via our support page.