ASKGOTCHA.AI PRIVACY POLICY
Our Commitment to Your Privacy
ASKGOTCHA.AI is a service provided by ThePaymaster Limited. We are committed to protecting your privacy while delivering comprehensive risk assessment and intelligence services. As a provider of advanced business intelligence, we understand that trust and confidentiality are paramount. This policy demonstrates our commitment to protecting your personal data through industry-leading standards and innovative technology.
Core Principles
Our approach to privacy is built on six fundamental principles:
1. Data Minimisation
• We collect and process only data essential for our intelligence services
- We actively avoid collecting unnecessary information
- We regularly review our data collection practices
- We maintain a clear justification for all data we process
2. Purpose Limitation
- Every piece of data we collect has a clear, documented purpose
- We use data only for the purposes we’ve specified
- We obtain consent for any new uses of your data
- We maintain transparency about how we use your information
3. Storage Limitation
- We keep data only for as long as necessary
- We have defined retention periods with clear justification
- We securely delete data when no longer needed
- We regularly review our retention practices
4. Security by Design
- Privacy and security are embedded in all our processes
- We use advanced encryption for data protection
- We maintain strict access controls
- We regularly test and update our security measures
5. Transparency
- We communicate clearly about our data practices
- We provide detailed information about how we use your data
- We notify you of any changes to our privacy practices
- We maintain open channels for privacy questions
6. Rights Protection
- We ensure you can easily exercise your privacy rights
- We respond promptly to privacy requests
- We maintain clear procedures for handling privacy concerns
- We provide appeals processes for our decisions
Our Services and Your Data ASKGOTCHA.AI provides comprehensive risk assessment, due diligence, and intelligence services that require processing certain personal data. We handle your information with care and respect, ensuring compliance with the UK General Data Protection Regulation (GDPR) and related privacy laws.
Data We Process
We collect and process only the information necessary to:
- Provide comprehensive risk assessments
- Analyze entities, transactions, and business relationships
- Generate intelligence reports and recommendations
- Meet regulatory requirements
- Prevent fraud and financial crime
- Deliver our core intelligence services
Multi-LLM Processing
GOTCHA utilizes a multi-LLM (Large Language Model) architecture, which may involve processing your data through multiple AI models operated by ThePaymaster or by third parties appropriate data protection agreements. We implement measures to ensure the security of your data throughout this process.
Document Analysis
When you upload documents for GOTCHA analysis:
- You warrant that you have the legal right to share all content contained in those documents
- Documents may be processed by multiple AI systems for analysis
- We retain uploaded documents only for the period necessary to perform the requested analysis and for a reasonable period thereafter for customer service purposes
- We implement appropriate security measures to protect uploaded documents during processing
- We do not use the substantive content of your documents to train public AI models Automated Processing
GOTCHA uses automated processing, including profiling and risk scoring algorithms. You expressly consent to such automated processing and understand that reports may be generated without human review. If you wish to contest any decision based on automated processing or request human review, you may contact us at any time.
Your Privacy Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict how we use your data
- Object to processing
- Receive your data in a portable format
- Contest automated decisions
We make exercising these rights straightforward and respond to all requests promptly.
Security Measures
We protect your data through:
- Advanced encryption
- Multi-factor authentication
- Regular security testing
- Strict access controls
- Continuous monitoring
- Staff training
- UK Cyber Essentials certification Retention Periods
We retain different types of data for specific periods:
- Assessment reports: 2 years
- Uploaded documents: Duration of analysis plus 90 day
- Account information: Duration of account plus 1 year
- Communication records: 2 years
- Technical logs: 6 months
All retention periods are regularly reviewed and updated based on legal requirements and business needs.
Third-Party Services
We work with trusted partners who maintain high data protection standards:
- HubSpot: Client intake and communication
- Multiple specialized LLMs for research depth
- Claude: Final report generation
All partners are contractually bound to protect your data and comply with relevant privacy laws.
Data Controller Information
ThePaymaster Limited is registered with the Information Commissioner’s Office (ICO) as a data controller under reference ZB877477.
Contact Us
For privacy matters, contact us at:
- Email: info@thepaymaster.co.uk
- Phone: +44 20 7088 8267
- Post: Data Protection Team, ThePaymaster Limited, 167-169 The Fifth Floor, Great Portland Street, London, England, W1W 5PF
Updates
This policy was last updated: April 9, 2025
We review this policy regularly and will notify you of any significant changes.
ThePaymaster Limited is a company registered in England and Wales (Company Number 15991850) with its registered office at 167-169 The Fifth Floor, Great Portland Street, London, England, W1W 5PF.
