Privacy Policy

Last updated: 17 April 2026

This Privacy Policy explains how ARYANETIX LTD (Company No. 11425860), trading as Chase Up, collects, uses, stores, and protects your personal data when you use our website at chaseup.io, the Chase Up application, and all related services (collectively, the "Service"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Data Controller

ARYANETIX LTD is the data controller responsible for your personal data. Where you use Chase Up to send reminders to your own clients, you act as the data controller for your clients' data, and we act as a data processor on your behalf.

2. Personal Data We Collect

2.1 Account Data

• Full name
• Email address
• Phone number
• Organisation name
• Subscription and payment status

2.2 Contact Data You Provide

Where you use the Service to send messages to your own contacts, we store on your behalf:

• Contact names and contact details (phone numbers, email addresses)
• Message content and delivery status records
• Replies received from your contacts

2.3 Usage Data

• Service usage analytics and feature interaction
• Device type, operating system, and application version
• Error logs and diagnostic data

2.4 AI-Processed Data

The Service uses third-party AI processors for text analysis. Data sent to AI processors is limited to what is necessary for the specific function and is not used to train AI models.

3. How We Use Your Data

Purpose	Legal Basis (UK GDPR)
Provide and operate the Service	Contract performance
Send messages on your behalf to your contacts	Your instruction as controller
AI-assisted text analysis	Contract performance
Process payments	Contract performance
Detect abuse and maintain security	Legitimate interest
Comply with legal obligations	Legal obligation
Send service announcements and updates	Legitimate interest

4. Data Processors and Third-Party Services

We share personal data only with the following third-party processors, solely for the purposes described:

Processor	Purpose	Data Shared
Twilio	Messaging delivery	Phone numbers, message content
Anthropic	AI-assisted text analysis	Text submitted for processing
Resend	Transactional email delivery	Email addresses, email content
Oracle Cloud (UK-London-1)	Infrastructure hosting	All service data (encrypted)
Apple / Google	Application distribution and billing	Account identifiers, payment data

We do not sell, rent, or trade your personal data. Data sent to our AI processor is used solely for the requested function and is not retained for model training purposes.

5. Data Storage and Security

• Location: All data is stored on Oracle Cloud Infrastructure in the UK-London-1 region (United Kingdom).
• Encryption in transit: All data transmitted between your device, our servers, and third-party processors is encrypted using HTTPS/TLS.
• Access controls: Access to production systems is restricted to authorised personnel only.
• Backups: Regular backups with a rolling retention window.

6. Data Retention

Data Type	Retention Period
Active account data	Duration of your subscription
Client data (contacts, deadlines, documents)	Duration of your subscription
Message history	Indefinite (while account is active)
Audit trail records	Indefinite (while account is active)
Session tokens	24 hours
Database backups	30 days (rolling)
Data after account deletion	Deleted within 30 days of request

When you delete your account or request data deletion, we will remove all personal data within 30 days, except where retention is required by law.

7. Cookies

The Chase Up website uses minimal cookies:

• Gate cookie: When you access the Chase Up landing page, a cookie is set for 7 days to remember that you have passed the gate page. This cookie contains no personal data.
• Session cookies: Used to maintain your authenticated session within the app. These expire after 24 hours of inactivity.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites. No consent banner is required as our cookies are strictly necessary for the operation of the Service.

8. International Data Transfers

Your data is primarily stored in the United Kingdom. Where data is transferred to processors outside the UK, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner's Office
• Processor agreements that require data protection standards equivalent to UK GDPR
• Data minimisation — only the minimum data necessary is shared with each processor

9. Your Rights

As a UK-registered company, we comply fully with the UK GDPR and the Data Protection Act 2018. Under these laws, you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

Supervisory authority: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Response time: We will respond to all rights requests within 30 days.

10. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

11. How to Exercise Your Rights

To exercise any of the rights described above, or to ask a question about this Privacy Policy, please contact us:

We may ask you to verify your identity before processing your request. We will respond within the timeframe required by applicable law (typically 30 days).

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you a notification through the app or by email. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at hello@chaseup.io.