Privacy Policy
Plain-English summary: we collect what we need to run the service. Data stays in the EU. We don't sell it. You can ask us to delete it whenever you want. Detailed rules below.
Who we are and how to reach us
The data controller is Telvara Holdings Limited, registered in the United Kingdom under company number 17175891, at 27 Crofton Road, No. 6, 1st Floor, Liverpool, England, L13 5UJ. For data-protection requests (access, rectification, erasure, portability, restriction, objection), email privacy@leadingpilot.com. We respond within 30 days.
What data we collect
- Account data: name, email address, hashed password.
- Usage data: which qualifications you ran, how many credits you spent, dashboard activity.
- Lead data: the conversations you process through LeadingPilot. Retained 30 days by default, configurable in /app/settings.
- Billing data: order amounts, dates, and a tokenised reference from our payment partner.
- Cookies: only what's strictly needed (session, currency preference). No tracking.
Why we collect it
To provide the service, to bill you, to prevent fraud, and to comply with our legal obligations (HMRC record-keeping, GDPR / UK GDPR obligations, anti-money-laundering rules).
Legal basis
Contract performance under Article 6(1)(b) GDPR for the service itself. Legitimate interest under Article 6(1)(f) for security, fraud prevention, and product analytics. Consent under Article 6(1)(a) for any non-essential cookies (we don't use any at launch).
Who we share data with
We share data only with the processors below, each under a written GDPR-compliant data processing agreement. We do not sell data; we do not share data for third-party advertising.
- Anthropic (LLM, qualification model)
- Payit123 Solution (payment orchestrator) and its underlying card processors
- Resend (transactional email)
- Hostinger (hosting)
- Cal.com (booking link delivery)
If you need the name of the specific card processor used for a given transaction, email privacy@leadingpilot.com with the order number and we'll provide it.
Where data is processed
Data is processed inside the European Union and the United Kingdom. No third-country transfers are made without Standard Contractual Clauses and the additional safeguards required by the EU Commission's 2021 SCCs.
How long we keep data
- Account data: while the account is active, plus 30 days after deletion request.
- Lead transcripts: 30 days by default, configurable.
- Billing data: 7 years (UK statutory retention for accounting records).
Your rights
Under GDPR and UK GDPR you have the rights to access, rectification, erasure (the “right to be forgotten”), restriction, portability, and objection. To exercise any of these, email privacy@leadingpilot.com from the email address on your account.
CCPA notice for California residents
California residents have the right to know what personal information we collect, to delete it, and to opt out of any sale of personal information (we do not sell personal information). Direct requests to privacy@leadingpilot.com.
Changes to this policy
We'll email registered users at least 30 days before any material change to this policy. The current version is always available at this URL with the “Last updated” date at the top.