Privacy Policy

1. Introduction

Spotter ("we", "us", or "our") is a product of Hillway Property Consultants Ltd (Company Number: 14319867). We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered business development platform at www.spotterai.uk (the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title when you register.
• Business Profile: Information about your services, expertise, target markets, and preferences.
• Payment Information: Billing details processed securely through Stripe (we don't store card numbers).
• Communications: Correspondence when you contact us for support or enquiries.

2.2 Information Collected Automatically

• Usage Data: How you interact with the Service, features used, opportunities viewed.
• Device Information: Browser type, operating system, IP address.
• Cookies: Essential cookies for authentication and analytics cookies (with consent).

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name and email.
• Public Sources: Our AI processes publicly available information (tender portals, news, Companies House) to find opportunities.

3. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Find and score relevant opportunities for your business
• Generate personalised outreach drafts
• Train our AI to better match your preferences (based on feedback)
• Process payments and manage subscriptions
• Send service-related communications and digest emails
• Respond to support requests
• Comply with legal obligations

4. AI and Machine Learning

Spotter uses AI (powered by Anthropic's Claude) to analyse opportunities and generate insights. Your feedback (thumbs up/down) helps improve relevance scoring for your organisation only. We do not use your data to train general AI models or share it with other customers.

5. Data Sharing

We share your data only with:

• Service Providers: Supabase (hosting), Stripe (payments), Anthropic (AI processing), Resend (emails), Slack (notifications if enabled).
• Legal Requirements: When required by law or to protect our rights.

We never sell your personal data to third parties or use it for advertising purposes.

6. Data Security

We implement industry-standard security measures including:

• Encryption at rest and in transit (TLS 1.3)
• Row-level security in our database
• Regular security audits
• Access controls and authentication
• Data stored in UK/EU data centres

6.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, in accordance with GDPR requirements. We will also notify the Information Commissioner's Office (ICO) where required.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

8. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at hello@spotterai.uk.

9. Cookies

We use:

• Essential Cookies: Required for authentication and security.
• Analytics Cookies: To understand how the Service is used (with consent).

You can manage cookie preferences through your browser settings.

10. International Transfers

Your data is primarily stored and processed in the UK/EU. Where we use service providers in other countries (e.g., Anthropic in the US), we ensure appropriate safeguards are in place through Standard Contractual Clauses.

11. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

13. Contact Us

For privacy-related enquiries, contact our Data Protection Lead:

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

https://ico.org.uk/make-a-complaint/