Privacy Policy

We use your personal data only to:

• Create and run your account and workspace
• Show your own data back to you, and compute things like your Firm Fit score or application readiness from your own inputs
• Process your purchases and payments through Stripe
• Send account and transactional emails (confirming your address, resetting your password, purchase receipts) and respond to support requests sent to admin@tccompanion.co.uk
• Detect and prevent fraud or abuse, and keep the platform secure
• Understand, in aggregate and only with your consent, how the product is actually used, so we can improve it
• Meet our legal and accounting obligations

We do not use your data to train any AI model (we do not use any AI functionality at all: see section 10), and we do not sell it or share it with third parties for advertising.

• Contract performance (Art. 6(1)(b)): running your account and the features you use, and processing your purchases
• Consent (Art. 6(1)(a)): product analytics, which never runs until you actively accept our cookie banner, and any marketing communication you separately opt into
• Legitimate interests (Art. 6(1)(f)): protecting TC Companion, our users, and the platform against fraud, misuse, and security threats, where those interests are not overridden by your rights and freedoms
• Legal obligation (Art. 6(1)(c)): retaining financial records for tax and accounting purposes

We do not sell your personal data. We share it only with:

• Our payment processor, to process payments (your name, email, and payment amount). It is a certified PCI DSS Level 1 service provider
• Our database and authentication provider, which enforces row-level security so your data is readable only by your own logged-in account
• Our hosting provider, which hosts the website and app itself
• Our email delivery provider, which sends account emails (such as confirming your address or resetting your password) on our behalf, and support-request notifications
• Our analytics provider (EU-hosted), only once you have accepted analytics cookies

Administrative access to account data through our database provider is restricted to authorised personnel, and is used only where reasonably necessary to operate, secure, maintain, or support the service. Automated access is limited to the functionality necessary to provide the service, such as processing account changes, purchases, or entitlements.

We may disclose personal data to law enforcement, courts or regulators (including the ICO) where legally required to do so.

Every firm page has a "Past Applications" panel showing real material on file for that firm. Anyone visiting, including someone not logged in, can see the document labels and a short, blurred preview of the text underneath; the full document only ever shows once that firm is unlocked, through a purchase or because it is free.

That preview material comes from one internal account we use to populate the archive, not from any ordinary user's own saved documents. Everything you save in your own private application archive stays private to your account: nothing you save is ever shown publicly, to anyone else, or to any other account.

Our payment processor, database and authentication provider, hosting provider, and email delivery provider are all US-headquartered companies. Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR Chapter V, including the UK International Data Transfer Agreement (UK IDTA) or an applicable adequacy decision.

• Payment and financial records: retained for as long as required for applicable tax, accounting, and legal purposes
• Terms acceptance records: retained for the duration of your account, and afterwards for as long as reasonably necessary to establish or defend our legal rights and demonstrate the terms governing your use of the service
• Account data: retained while your account remains active. If you use "Delete all my data", the content you have entered, including applications, tasks, notes, saved firms, and preferences, is permanently deleted. Certain records may be retained where necessary for legal, tax, accounting, fraud-prevention, or contractual purposes
• Closing your account: "Delete all my data" does not automatically close your account or delete your login credentials. To close your account completely, including your login, contact us at admin@tccompanion.co.uk. We will process your request without undue delay, subject to any information we are legally entitled or required to retain

Under UK data protection law, you may have the right to access, correct, or delete your personal data, receive certain personal data in a portable format, object to or restrict certain processing, and withdraw consent at any time where we rely on consent. These rights may be subject to legal conditions and exceptions.

You can permanently delete the content you have entered through Settings → Danger zone, no need to wait on a request. For anything else, including closing your account entirely, email admin@tccompanion.co.uk. We aim to deal with requests promptly and will respond within the timeframe required by applicable data protection law.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data protection regulator.

We use appropriate technical and organisational measures designed to protect your personal data, including:

• Encrypted communications using HTTPS/TLS
• Access controls and database security measures designed to prevent users from accessing another user's private content
• Secure authentication, with passwords handled by our authentication provider rather than stored by us in plain text
• Secure payment processing through Stripe. TC Companion does not receive or store your full card number or CVV

We regularly review the security measures used to protect the platform. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

If we become aware of a personal data breach, we will investigate and respond in accordance with applicable data protection law, including notifying the ICO and affected individuals where legally required.

TC Companion does not use artificial intelligence or machine learning anywhere in the product, and does not make any decision about you using automated processing that has a legal or similarly significant effect. Tools like Firm Fit and the Application Readiness Assessment are simple, transparent calculations over the answers and information you have entered yourself: every result explains its own reasoning, and none of it is AI-generated.

TC Companion is intended for users aged 18 and over. You must be at least 18 years old to create an account or purchase access. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has registered an account, contact us at admin@tccompanion.co.uk and we will take appropriate steps to investigate and, where appropriate, delete that data.

We may update this policy as the product develops. Material changes will be reflected on this page, and where a change is significant we will try to notify you in the app beforehand. The date at the foot of this page shows when this was last revised.

We use one essential cookie to keep you logged in, and a small number of other strictly necessary cookies to run the site. We do not use analytics cookies unless you actively accept them, and we never use advertising or cross-site tracking cookies. See our Cookie Policy for the full detail.

For privacy queries, to exercise your rights, or to raise a concern, email admin@tccompanion.co.uk or use the contact page. If you have a concern about how we use your personal data, we would appreciate the opportunity to address it. You also have the right to make a complaint to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113, or ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.