Privacy notice

Who controls your information

The controller is Veyran 42 Ltd, registered in England and Wales with company number 17422794, whose registered office is 8 Castle Gate, Tickhill, DN11 9QU. Contact: hal@veyran42.co.uk.

What we collect and where it comes from

• business and authorised-contact identity supplied by you;
• billing, payment status and transaction references supplied by you and Stripe;
• eligibility, scope, authority and service instructions supplied by you;
• messages, support and complaint records;
• synthetic or irreversibly redacted service descriptions and test artefacts; and
• necessary security and service logs created by our service providers.

The Launch Gate pilot does not accept customer, employee, user or other third-party personal data in test descriptions or materials. Do not send passwords, API keys or production credentials. Contact, payment, authority and safe-scope information is contractually required; without it we cannot accept payment, scope or deliver the service.

Eligibility decisions

The pre-payment eligibility check applies fixed answers in your browser and does not request identifying information. An ineligible answer stops automated checkout but does not mean we have rejected every possible scope: contact us to ask whether a smaller safe scope is possible.

Why we use it

We use contact, order and service information where needed to take steps at your request and perform our contract. We use records where needed to meet tax, accounting and other legal duties. We use proportionate security, support and dispute records for our legitimate interests in protecting and improving the service, preventing misuse and establishing or defending legal claims. You may object to processing based on legitimate interests by contacting us; we will consider your circumstances and the law. We do not sell personal information or use materials you provide to train general-purpose models.

Processors and transfers

Vercel hosts the website and server functions; Stripe provides hosted payment processing; Supabase stores the minimum order and intake records in its London region; and Resend sends transactional messages from the Veyran 42 domain. These suppliers may use approved subprocessors or process limited information outside the UK. We rely on their published contractual safeguards, including applicable UK international data-transfer terms. Contact us for information about the relevant safeguards. Payment-card details are entered on Stripe's hosted checkout and are not received by Veyran 42.

Retention and deletion

• expired unpaid reservations: deleted after 36 minutes;
• rejected or unsafe intake: not stored;
• raw test inputs and working artefacts: deleted 90 days after delivery, or earlier where the contract permits;
• final reports, regression manifests and support correspondence: retained for up to 12 months, then deleted or anonymised unless a dispute requires longer;
• contract, invoice, payment, refund and accounting evidence: retained for the legally required accounting period; and
• deleted Supabase records may remain in protected backups for up to seven days before expiry.

We do not retain test materials indefinitely or reuse them for model training without a separate lawful basis and express agreement.

Your rights and complaints

Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection and portability. Contact hal@veyran42.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and similar storage

The pilot uses no analytics, advertising or non-essential cookies. The checkout and intake journey uses browser session storage only to carry short-lived signed eligibility and payment-state references between pages. Stripe's hosted checkout may use technology that is strictly necessary to provide secure payment. If non-essential technology is introduced, we will update this notice and obtain any required consent before enabling it.