PRIVACY NOTICE
This solicitor-review draft privacy notice explains the intended personal-data handling for ANDY. Controller details, retention periods and subprocessors should be checked before publication.
Review copy. This notice is prepared for legal and operational review before live self-service checkout is enabled. It should be checked against the final company details, hosting location, processor list, retention schedule and customer contracts.
The organisation operating ANDY is responsible for account, billing, marketing, platform-security and support information it controls. For personal data placed inside a customer workspace by authorised users, the customer is normally the controller and ANDY acts as processor under the customer's instructions.
ANDY may collect account details such as name, email address, password hash, MFA status, role and workspace membership; organisation details such as workspace name, billing contact and plan; payment and subscription references from Stripe; support messages; contact-form submissions; security logs such as IP address, device details and sign-in events; product analytics events; and content users choose to upload or create in the workspace.
The mobile app also processes mobile-session identifiers, device platform and app-version metadata, encrypted push-notification tokens and notification preferences. Push messages contain only generic status information and route identifiers, never prompts, answers, tenant names, file names or SOP titles.
ANDY is not designed for identifiable patient data. Users are warned not to upload identifiable patient data unless a separate written arrangement expressly covers that use.
ANDY uses personal data to create and manage accounts, provide the workspace, authenticate users, enforce MFA and access controls, process subscriptions, send service emails, respond to support requests, secure and audit the platform, investigate misuse, improve reliability and comply with legal obligations.
Where ANDY analyses prompts, documents or chats to produce answers, that processing is performed to provide the service requested by the customer and its users.
Depending on the context, ANDY expects to rely on contract performance for account and subscription administration; legitimate interests for service security, support, product reliability and B2B communications; legal obligation for tax, accounting, compliance and security records; and consent where required for optional marketing or non-essential cookies. For workspace content processed on behalf of a customer, the customer determines the lawful basis.
ANDY uses model providers and retrieval systems to generate working outputs from permitted inputs. ANDY is not intended to make solely automated decisions about individuals with legal or similarly significant effects. Customers must keep human review and regulated decision-making in the correct authorised roles.
ANDY may share personal data with service providers that help operate the platform, including hosting, database, email delivery, payment processing, analytics, monitoring, security, model and support providers. Mobile push delivery may use Expo and the device platform's Apple or Google notification service. Scrubbed crash and coarse performance diagnostics may be processed by Sentry with default personal-data collection, screenshots, session replay and view-hierarchy capture disabled. ANDY may also disclose information where needed to comply with law, enforce terms, protect security, complete a business transaction or respond to lawful requests from courts, regulators or public authorities.
Some service providers may process information outside the UK. Where this happens, ANDY should use appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses or another lawful transfer mechanism.
Account, billing, security, audit and support records are kept only for as long as needed for the purposes described in this notice, including legal, tax, accounting, security and dispute-resolution needs. Workspace content is retained according to the customer's subscription, deletion requests, contractual obligations and any legal or regulatory hold. The mobile app does not provide offline workspace-content storage. Generated and downloaded files use temporary app storage and are removed after use or logout unless a user deliberately exports a copy through the operating system share sheet. Mobile refresh sessions expire after the configured session period or are revoked earlier on logout, password reset, membership suspension, emergency lock or administrator action. Final retention periods should be confirmed before publication.
ANDY uses technical and organisational measures intended to protect information, including access control, MFA requirements, tenant separation, encryption where configured, audit logging, backup controls and restricted administrative access. No internet service can guarantee absolute security.
Depending on the law and context, individuals may have rights to access, correct, erase, restrict or object to processing of their personal data, request portability and complain to the Information Commissioner's Office. Requests about workspace content may need to be handled by the customer as controller. ANDY may need to keep some records where required for legal, security, billing or regulated-record reasons.
Questions about privacy or data protection should be sent to zach@andyrp.com. Customers should also use their normal workspace administrator or contract contact for requests involving workspace content, exports or deletion.
NEED A CLEAR ANSWER?