Your privacy matters

1. Who we are and what this covers

Accagrity is the service described on this website, including its account, workspace, document, analysis, evidence, transformation, billing, and support features. For account and service administration, Accagrity generally acts as the controller or business deciding how personal information is used. If an organisation gives you access to a workspace, that organisation may act as controller or business for content it submits, and Accagrity may process that content on its instructions.

2. Information we collect

We may collect account details such as name, email address, authentication records, passkey or security settings, and support correspondence; workspace details such as membership, roles, invitations, billing plan, usage, and audit events; document information such as titles, revisions, text, uploaded objects, citations, provenance records, analysis findings, and transformation history; and technical information such as IP address, device and browser information, session identifiers, approximate location, logs, and security events. Payment card details are handled by our payment processor rather than stored as full card numbers by Accagrity.

3. Why we use information

We use information to provide and secure the service; authenticate users and enforce workspace permissions; analyse, compare, transform, export, and preserve documents at your direction; maintain revision, evidence, citation, and provenance records; measure usage and apply plan limits; process subscriptions and payments; send verification, password-reset, security, and service messages; prevent fraud, abuse, malware, and unauthorised access; diagnose failures and improve reliability; comply with law and enforce our agreements; and respond to support requests.

Where the GDPR or UK GDPR applies, our legal bases may include performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where we request it. You may withdraw consent at any time where processing relies on consent.

4. Documents and model-assisted features

Your documents remain yours, subject to the rights needed to operate the service. We use submitted content to provide the features you request, including analysis and transformation. We do not sell document content or use it for unrelated advertising. Depending on the enabled feature and configuration, content may be sent to carefully selected infrastructure or model providers as service providers to complete a requested operation. We do not use customer content to train general-purpose models unless a separate, clear agreement or consent says so.

5. Sharing and service providers

We share information only as needed with hosting, database, storage, email, security, analytics or monitoring, model, and payment providers; with workspace administrators when their role permits; with professional advisers subject to confidentiality; or with authorities and other parties when legally required or necessary to protect rights, safety, and the service. Providers are required to protect information and process it only for agreed purposes.

6. International transfers

Accagrity and its providers may process information in countries outside the EEA, the UK, or your home country. Where required, we use an approved transfer mechanism such as an adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful safeguard, together with appropriate technical and contractual protections.

7. Retention and deletion

We keep information while your account or workspace is active and for as long as needed for the purposes above, including security, accounting, dispute, and legal obligations. Retention can vary by document, plan, workspace policy, and legal hold. You may request deletion, but some information may remain in restricted backups or records where retention is required or justified by law.

8. Your rights and choices

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to certain processing. You may also opt out of non-essential marketing communications and appeal a privacy decision where required. Residents of California and other US states may have additional rights, including knowing categories and purposes of personal information, correcting or deleting information, obtaining a portable copy, and opting out of sale, sharing, targeted advertising, or certain profiling. Accagrity does not sell personal information for money. To make a request, contact admin@accadpro.com. We may verify your identity and coordinate with a workspace administrator where the request concerns organisation-controlled content. You may complain to your local supervisory authority, the UK ICO, or another applicable regulator.

9. Security, children, and changes

We use access controls, encryption in transit, protected storage, upload validation, logging, and other safeguards appropriate to the service, but no system is risk-free. The service is not directed to children under the minimum age required in their jurisdiction. We may update this policy as the service or law changes; the revised version will show a new effective date. Questions, rights requests, and security concerns should be sent to admin@accadpro.com.

10. Cookies and local storage

The service uses strictly necessary authentication and workspace-selection cookies to keep you signed in, protect requests, and remember the active workspace. The interface may use local storage to remember your theme preference. We do not currently place analytics, advertising, social-media, or cross-site tracking cookies. If that changes, we will provide any notice and consent controls required by applicable law before using non-essential technologies.

11. Privacy contact and data protection officer

Privacy requests, complaints, and data-subject communications should be sent to admin@accadpro.com. The operating entity and whether a formal Data Protection Officer is required have not been identified in this application. Before launch, complete these details: [INSERT LEGAL ENTITY AND ADDRESS]; [INSERT DPO NAME OR “NO DPO APPOINTED”]; [INSERT DPO CONTACT, IF APPLICABLE]. Where an organisation controls workspace content, contact that organisation first for requests concerning its content.

12. Related trust documents

Contract customers may also review the Data Processing Addendum, Subprocessor Register, and Incident Response Overview.