Privacy Policy

1. Introduction

AI Risks (a trading name of 1-Fix Limited, Company Registration Number: 06543233) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered risk and opportunity assessment platform at ai-risks.co.uk.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name. If you sign in using Google or Microsoft OAuth, we receive basic profile information from these providers. We use Firebase Authentication to securely manage your login credentials.

Company Analysis Data

When you submit companies for analysis, we collect the company name, description, and any optional insider knowledge you provide. This data is processed by OpenAI's API to generate AI risk and opportunity assessments.

Billing Information

Payment processing is handled securely by Stripe. We store your billing address for invoice generation purposes. We do not store your full credit card details - these are processed directly by Stripe.

3. How We Use Your Information

• To provide and maintain our AI risk analysis service
• To process your credit purchases and generate invoices
• To authenticate your account and maintain security
• To communicate with you about your account or service updates
• To improve our service based on usage patterns

4. Data Storage and Retention

Analysis Results

By default, we store your company analysis results so you can access them later. You have control over this:

• Per-search privacy option: You can choose "Don't store this search" when submitting an analysis. Results marked with this option are deleted from our servers within 24 hours of the analysis completing, and are typically removed as soon as you close or leave the results page.
• Account-wide setting: In your Settings, you can configure your default data retention preference.

Transaction Records

We retain transaction records for invoicing and legal compliance purposes. These records are kept for the period required by UK tax law (typically 6 years).

5. Third-Party Services

We use the following third-party services to operate our platform:

• Firebase (Google): For user authentication and account management
• OpenAI: To process company data and generate AI-powered risk assessments
• Stripe: For secure payment processing
• Replit: For hosting our application infrastructure

Each of these providers has their own privacy policies governing their handling of data.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure authentication via Firebase, and optional two-factor authentication (TOTP MFA) for email/password accounts.

7. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Request data portability

To exercise any of these rights, please contact us using the details below.

8. Cookies

We use essential cookies for authentication and session management. These are necessary for the service to function properly. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending you an email.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: