Privacy notice
What we collect
Your account details (email, display name), the cases you create, messages you send, and documents you upload. We deliberately collect the minimum needed to support your case.
How your case data is used
- Your case is visible only to you and to authorised advisors. Members can never see each other's cases.
- Relevant excerpts of your case may be processed by an AI provider to prepare summaries and explanations. Case material is not used to train models.
- Sensitive actions (who accessed what, and when) are recorded in an audit log.
What we ask of you
Please do not upload patient-identifiable information unless it is genuinely necessary to your case — redact patient names and details first.
Banding and pay information
If you use the banding tools we store your job description, the descriptions you write of your work, and a small set of structured details (your job title, current band, and relevant dates). We warn you before you upload a payslip. Your banding material is visible only to you and to authorised advisors; it is never used to assess another member's job, and it never becomes part of our general guidance library. Colleagues you compare yourself to are recorded anonymously unless you tell us they have agreed to be named.
Your rights
You can request an export or deletion of your account and case data, subject to lawful retention obligations. Ask us through the contact form — you do not need an account, and you do not need one to read our reply.
Retention and security
Data is stored encrypted at rest on UK/EU-capable infrastructure, with least-privilege access and daily backups. Retention policies are published before public launch.