Privacy notice.

Who is responsible

Joao Vitor Humenhuk Achutti, trading as Business Compliance Tools, is the controller for the personal data described here. Contact privacy@businesscompliancetools.com. Our service address is 2 South Quay Square, London, E14 9LT, United Kingdom.

Case details and uploaded files

Tools marked as local browser processing do not send case details, uploaded documents or generated evidence files to our servers during normal use. A temporary case draft may be held in browser storage while secure checkout opens. When you choose to save a paid ZIP for recovery, the browser uploads that exact ZIP to a private account archive for 30 days. We do not use its contents for any other purpose.

Do not put names, sensitive case facts or document contents into the homepage finder.

Information we use

Tool finder

Common descriptions are matched in the browser. If there is no direct match, the description is sent to OpenAI to suggest a released tool. Storage is disabled in the API request. Provider security retention may still apply.

Purchase access

A signed browser session identifies the device that started a purchase. Neon stores the purchase, consent timestamps, entitlement, recovery-code hashes and export audit needed to grant access. The case content is not included in those records.

Payment

Paddle receives the checkout email, United States state, ZIP code, payment method and billing information. We receive and store required transaction, customer and address identifiers, amount, currency, country and payment status through signed notifications. We do not receive the full card number.

Support

We use the contact details and message you send us to respond and keep an appropriate support record.

Security and delivery

Vercel and our service logs may process IP address, user agent, requested page, timestamps and error details to deliver and protect the service.

Service diagnostics

We use server diagnostics and privacy-safe aggregate operational events to detect failures and abuse. We do not use Vercel Web Analytics or Speed Insights in the initial paid release.

Why we use it

• To provide a tool, process an order and grant purchase access where this is necessary for a contract with you.
• To secure, diagnose and improve the service where this is in our legitimate interests and does not override your rights.
• To respond to support, privacy and legal requests.
• To keep transaction and tax records where the law requires it.

We do not use the finder to make a legal or similarly significant decision about you.

Service providers and international processing

We use Vercel for hosting, Neon for commercial records and private recovery archives, Paddle for payments, and OpenAI for unmatched finder descriptions. These providers may process data outside the United Kingdom or European Economic Area. We use them only where a lawful transfer mechanism and appropriate safeguards apply.

• Vercel privacy information
• Neon privacy information
• Paddle privacy information
• OpenAI privacy information

How long we keep it

• Browser case drafts remain in session storage until cleared or the browser session ends.
• A private ZIP archive is retained for 30 days after you save it for Account recovery. A same-browser copy can remain in IndexedDB until you delete it, clear site data or the browser removes local storage. A later refund or payment reversal can stop new server authorisations, but it cannot remotely delete a file already delivered to your browser.
• A signed browser purchase session remains on that device until it expires or you clear site storage.
• Purchase and tax records are generally kept for six years from the end of the financial year to which they relate, or longer where law or an active dispute requires it.
• Support messages are normally kept for up to two years after the enquiry closes unless they form part of a transaction or dispute record.
• Operational logs are kept only for the provider period and internal period needed for security, diagnosis and abuse prevention.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to our use of personal data, and to data portability. Email privacy@businesscompliancetools.com to exercise a right. We may need limited information to verify the request.

You may complain to the Information Commissioner’s Office. If you are in the European Economic Area, you may also complain to the supervisory authority where you live, work or believe an infringement occurred. Contacting us first is optional.

Cookies and browser storage

We use only storage needed for browser access, security, the local checkout return, recovery-sheet continuity and same-browser access to an exact private ZIP. We do not run advertising analytics, cross-site behavioural tracking or sell or share personal information for cross-context behavioural advertising. See the cookie and browser storage policy for details.

United States privacy rights

We do not sell or share personal information for cross-context behavioural advertising. If a United States state privacy law applies to our processing, you may use privacy@businesscompliancetools.com to request access, deletion or correction, or to ask about your applicable rights. We will not discriminate because you exercise a privacy right.