How we handle your data
What we do, in the order it happens.
Every promise below is one we make on the homepage. This page states each one plainly so you can read them in one place, and so your counsel can hold the agreement against them line by line.
Nothing moves during onboarding
We work from counts and screenshots until there is a buyer agreement in place. No records leave your systems to get an estimate, to qualify, or to have a conversation with us. If anyone asks you to upload records before an agreement is signed, something has gone wrong.
Our tooling runs inside your network, read only
Extraction runs on your own hardware, against your own systems, with read access only. It does not write to your systems, and it does not need administrative credentials to the business.
De-identification happens before transmission
Identifying details are removed on your machine, before anything is sent. We would rather carry the cost of doing that locally than hold personal data at all. Removing names is only the first step: addresses, pricing, account identifiers and anything tied to a specific customer come out too, because context identifies people as surely as names do.
Your staff approve a sample first
Before the first record moves, someone on your side reviews a sample of the output and signs off on it. If the sample is wrong, nothing moves.
You keep ownership
You are licensing a copy, not selling the original. You keep every underlying record and you keep operating exactly as you do now.
The licence is term limited
A buyer's right to use the data for new training stops at the end of the term. A model that has already been trained cannot be untrained, which is true of every data licence in this market, and the agreement says so plainly rather than implying otherwise.
You can veto any buyer
Any buyer, any department, any customer, any date range. Exclusions are set in the agreement, and they can be widened later but not narrowed.
Buyers are named before any transfer
We tell you who the buyer is before anything is transferred. You can decline an individual buyer without affecting the rest of the agreement.
What never leaves your systems
- Customer and client names, addresses and contact details
- Your pricing, margins and contract terms
- Anything personal about your staff or anyone else
- Your customer list, and the fact that any customer is yours
- Passwords, keys, card and bank details
- Anything covered by a confidentiality clause you name
People inside the records
Section 7 of our Privacy Policy explains how personal information that may appear in licensed records is treated, including our commitment not to attempt to re-identify anyone and the matching obligation we place on every buyer.
Read the agreement
This page summarises our standard agreement in plain language. The agreement itself is the document that binds us, and we send it early precisely so your counsel has time with it.
This page summarises our standard agreement. If anything here differs from the signed agreement, the agreement applies.