This Privacy Policy explains how Criterai Ltd (“criterAI”, “we”, “us”, or “our”) collects, uses, stores and protects personal data in relation to the criterAI platform.
1. Who We Are
Criterai Ltd is a UK-registered company operating at:
Welton Pumping Station, Watford Road, Daventry, NN11 2NE
You can contact us regarding this policy at:privacy@criterai.co.uk
criterAI is a business-to-business (B2B) software tool used by UK mortgage professionals to research lender criteria via an AI-powered interface.
2. What Personal Data We Collect
We collect and process only limited personal data, and only for the purpose of user account creation and management. This includes:
- Full name
- Email address
- Contact telephone number
- Business name and address
We also verify firm registrations against the FCA register.
No personal data is collected or processed as part of criteria searches conducted using the criterAI tool. All queries are anonymised.
3. How We Collect Data
We collect data directly from users via our website during sign-up. No data is collected from third parties.
Cookies are used for essential website functionality and aggregated usage analytics. For details, see our Cookie Policy.
4. Purpose and Legal Basis for Processing
We process user data solely to:
- Create and manage user accounts
- Verify firm registration
- Provide access to the criterAI platform
- Communicate service-related updates
Our lawful basis for this processing is performance of contract andlegitimate interests in providing our services to regulated UK mortgage professionals.
All third-party services used by criterAI are subject to GDPR-compliant processing agreements.
5. Data Sharing
We share data only with essential service providers who support the functioning of our platform, including:
- Notion (knowledge base management)
- Outseta (user authentication and CRM)
- CustomGPT (AI interface)
- Google Drive (file storage)
- Stripe (payment processing)
No data is transferred outside the UK, EEA, or EU.
6. Data Retention
- User account data: retained up to 12 months after account closure
- Tool usage data: retained for 12 months from date of use
We may retain anonymised usage statistics beyond this period for internal analysis.
7. Security
We implement industry-standard technical and organisational measures to protect your data, including:
- SSL encryption for data in transit
- 256-bit AES encryption for data at rest
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request rectification or deletion
- Object to or restrict processing
- Request data portability
To exercise your rights, email us atprivacy@criterai.co.uk. We will respond within 30 days.
9. Children
criterAI is not intended for use by individuals under the age of 18. We do not knowingly collect data from children.
10. Automated Decision-Making
No automated decision-making or profiling is used which produces legal or similarly significant effects on individuals.
11. Changes to This Policy
We may update this Privacy Policy from time to time. All changes will be notified to registered users via email.