Privacy notice

This notice explains what personal data pAud AI Lite handles, why, for how long, and what you can do about it.

Who we are

pAud AI Lite is run by pAud Ltd, a company registered in England and Wales (company number 17241933). Registered office: 45 Silverstream House, Fitzroy Street, London W1T 6EB, United Kingdom. Contact for anything in this notice: [email protected].

Two roles, two kinds of data

• Your dataset. You decide what is in the file you upload and why. You are the controller of that data. We are your processor: we handle it only to run your trial, under our data processing agreement (DPA).
• Your contact record. The details you type into the form: name, work email, company, role and country, the consents you gave, and the status and dates of your submission. For this record pAud is the controller.

What we use the data for

• Your dataset: to check it, convert it and run a private pAud on it for you. Nothing else. We do not use it to train models. To propose how your tables fit together, only their structure and up to five masked sample values per column go to an AI service (Anthropic), and a person reviews every proposal.
• Your contact record: to verify your email with a one-time code, run your trial, send you service emails (confirmation, reply, access, deletion receipt), keep the service safe from abuse, and follow up on the trial. Our legal basis is legitimate interest in running and following up on the trial you asked for.
• Product updates: only if you ticked the separate, optional box. The basis is your consent. You can withdraw it at any time; every update email says how.

How long we keep it

• Your dataset and everything derived from it are deleted no later than 14 days after your latest upload. That includes the uploaded file, the validation report, the converted log, your pack and what you typed about your files (which systems, which dates). If you upload again, the earlier upload is deleted at once and the 14 days count from the new upload.
• Access lasts up to 10 days from the moment your pAud goes live. It always ends before the deletion date. If our reply is late, your access gets shorter. A late reply never extends how long we keep your data.
• No backups. We take no backups or snapshots of your dataset.
• Your contact record is kept for 12 months, or less. After deletion we also keep the deletion receipt: what was deleted and when. It holds nothing from your dataset.
• Service logs hold no file contents and no file names in clear. They are kept for 14 days at most.

Files you download

Files you download from your own pAud portal, such as your pack or report, are yours. Once on your device they are outside our control and our deletion. Keep or delete them as you see fit.

Who else handles the data

We use four sub-processors: Cloudflare (DNS, TLS, bot check and file storage in the EU), Hetzner Online GmbH (servers in Germany), Resend (email, sent from the EU by a US company) and Anthropic (a US company whose AI model proposes how your tables fit together from their structure and up to five masked sample values per column; Anthropic deletes these within 30 days, see the sub-processors page). The email with our report names your tables and columns but never contains data values; our email provider keeps a log of each email for 30 days. The full list, with the transfer basis for each, is on the sub-processors page. We do not sell your data.

Your rights

For your contact record you can ask us for a copy, ask us to correct it, ask us to erase it, ask us to restrict its use, object to it, and ask for it in a portable format. You can withdraw any consent at any time.

If you are a person whose data is inside an operator's dataset, the operator is the controller. Please contact them first. If you contact us, we pass your request on and help them answer it.

You may also complain to a data protection authority, for example where you live or work.

How to delete your data

• Delete link. Your confirmation email carries a "delete my data now" link. It deletes your dataset and everything derived from it at once, even while your pAud is live. Tick "and forget me" to erase your contact record too.
• Email. Write to [email protected] from the address you used.

After every deletion we email you a receipt listing what was deleted and when.

Changes

If we change this notice, we publish the new text on this page. If a change affects data we already hold, we email you before it applies.