Privacy Policy

The AI Policy Creator is operated by Zeus-AI Solutions Ltd, the data controller for the data described in this policy.

• Company: Zeus-AI Solutions Ltd, registered in England and Wales, company number 16793939.
• Registered address: 56 Hanley Road, Hull, England, HU5 5ST.
• ICO registration reference: ZC016874.
• Contact: hello@zeus-ai.co.uk.

You do not create an account to use our tools. We collect the information you enter into the readiness check or the policy generator, which is used to produce your result and, for paid policies, to deliver your document. This includes:

• Contact details — your email address, and your company name.
• Business profile — your industry, company size, the AI tools you use, how and where AI is used across your teams, and how AI governance is currently handled.
• Data-handling information — whether you handle personal or sensitive data, whether you input data into AI tools, and which regulators (if any) apply to you.
• Payment confirmation — for paid policies, we receive confirmation of payment and a transaction reference from Stripe. We never see or store your card details (see Section 4).
• The generated document — the policy or output we produce for you is stored so it can be delivered and re-issued to you.

We only collect what the tools need to generate a useful result. We do not ask for special category data about individuals, and you should not enter any into the free-text fields.

Under UK GDPR we rely on the following lawful bases:

• Contract — where you purchase a policy, we process your data to deliver the document you have paid for.
• Legitimate interests — for the free readiness check and acceptable-use policy generator, to produce your result and to understand and improve our tools. You can object at any time.
• Consent — where you opt in to receive follow-up emails or marketing. You can withdraw this at any time.
• Legal obligation — where we must process data to meet legal or accounting requirements.

We do not sell your data, and we do not use it for automated decisions that produce legal or similarly significant effects on you — the generated policy is a document for you to review and adopt at your discretion.

We use a small number of trusted providers to run the service. Each processes data only to perform their function:

• Stripe — payment processing. When you buy a policy, your card details are entered directly with Stripe on their secure checkout; we never receive them. To carry your submission through the payment step, your form data is briefly attached to the Stripe checkout session and returned to us once payment succeeds.
• Anthropic — the AI provider whose models generate your policy document from the information you provide. Data sent for generation is not used to train their models under their commercial terms.
• n8n (self-hosted on Elestio, EU) — orchestrates the generation process and delivers the finished document.
• Supabase — our database, where your submission and the generated document are stored.
• Google Workspace — for our email correspondence with you.

Your submissions and generated documents are stored in our database. Some providers (such as Stripe and Anthropic) may process data outside the UK, including in the United States. Where data is transferred outside the UK, it is protected by appropriate safeguards required under UK GDPR — such as UK adequacy regulations, or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

We keep your data only as long as necessary for the purposes above. In practice we retain submissions and generated documents for up to 24 months, after which they are deleted, unless we are required to keep certain records (such as proof of payment) longer to meet legal or accounting obligations. You can ask us to delete your data sooner (see Section 7).

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to how we process it.
• Receive your data in a portable format.
• Withdraw consent where processing relies on it.
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these, email hello@zeus-ai.co.uk. We aim to respond within one month.

We use only the cookies necessary for the site and checkout to function. We use privacy-friendly, cookieless analytics to understand aggregate usage. If we introduce additional analytics or advertising tools in future, they will be enabled only with your consent through a cookie banner.

We may update this policy from time to time; the current version always lives on this page with the date above. For any question about your data, contact Zeus-AI Solutions Ltd at hello@zeus-ai.co.uk. See also our Terms of Service.