Data Controller:
UltraScout AI Ltd
Company number: 17145129
Registered in England and Wales
5 Brayford Square, London, E1 0SG, United Kingdom
Email: [email protected]
This Privacy Policy explains how UltraScout AI Ltd ("we", "us", "our") collects, uses, stores, and shares your personal data when you use our website or SaaS platform, in accordance with the UK GDPR and Data Protection Act 2018.
We do not sell your personal data. We collect only what we need to provide and improve our services.
| Purpose | Legal Basis (UK GDPR Art. 6) |
|---|---|
| Account management and service delivery | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments | Performance of a contract (Art. 6(1)(b)) |
| Transactional emails (confirmations, notifications, password resets) | Performance of a contract (Art. 6(1)(b)) |
| Customer support and enquiries | Legitimate interests (Art. 6(1)(f)) |
| Marketing communications (opted-in only) | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Platform improvement and usage analysis | Legitimate interests (Art. 6(1)(f)) |
| Fraud detection and security | Legitimate interests (Art. 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
We request your consent before loading analytics cookies. Strictly necessary cookies (session, security) are always active. See our Cookie Policy for full details and how to manage preferences.
We do not sell your data. We share it only with trusted processors where necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Cloud infrastructure (AWS, Google Cloud) | Platform hosting and data storage | EEA/UK/USA (IDTA/SCCs) |
| Payment processor (Stripe) | Subscription payment processing | USA (IDTA/SCCs) |
| Email delivery provider | Transactional and marketing emails | USA (IDTA/SCCs) |
| Google Analytics (consent only) | Website usage analytics, IP anonymised | USA (IDTA/SCCs) |
| AI platforms (OpenAI, Google, Anthropic, Microsoft, Perplexity) | Running AI visibility queries (brand/company names only, not personal data) | USA (IDTA/SCCs) |
| Legal and regulatory authorities | Where required by law or court order | UK/as required |
All processors are bound by data processing agreements and may only act on our instructions.
Where we transfer data outside the UK, we use UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs). Contact us for details of specific safeguards.
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account, plus 2 years after closure |
| Analysis reports and results | Duration of account; deleted within 90 days of closure |
| Payment and billing records | 7 years (HMRC requirement) |
| Email and support communications | 2 years from last contact |
| Marketing consent records | Until withdrawn, plus 2 years |
| Website analytics (anonymised) | 26 months |
| Security and access logs | 90 days |
Email [email protected] to exercise any of these rights. We will respond within one calendar month.
If you are not satisfied, you may complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Website: ico.org.uk | Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Please contact us first — we would like the opportunity to resolve your concern.
We implement encryption in transit (TLS) and at rest, access controls, security monitoring, and contractual security requirements for all processors. In the event of a personal data breach likely to risk your rights, we will notify the ICO within 72 hours and affected individuals without undue delay.
Our services are for business users aged 18 and over. We do not knowingly collect data from anyone under 18. Contact us immediately if you believe we hold a child's data.
We will notify registered users by email of material changes at least 14 days before they take effect, and update the date at the top of this page.
UltraScout AI Ltd
Company number: 17145129
5 Brayford Square, London, E1 0SG, United Kingdom
Email: [email protected]