Privacy notice

Controller

Cardiff Giant Ventures Ltd, company number 12322092, Unit 12 Green Park, Coed Cae Lane Industrial Estate, Pontyclun, CF72 9GP. Contact: leon@cardiffgiant.ventures. We are not VAT registered.

What we collect

• Account details: your email address and sign-in information.
• Early-access list: email, and optionally name and company.
• Workspace content: names, roles and the systems, accounts, assets, processes, relationships and knowledge you record. We never ask for passwords or credentials; please do not enter them.
• Usage and attribution, only if you accept analytics: an anonymous identifier stored on your device, pages visited, and campaign or referrer details, used to measure sign-ups and purchases. If you reject, nothing is stored or sent. When we record a sign-up we send a one-way hash of your email address, never the address itself.

Please do not record special category data

Do not record health information, or other special category data such as religion, ethnicity, sexual orientation, trade union membership or criminal records, about any individual. Scenarios such as illness or death are what-if planning views about a role being unavailable; they do not need, and should not contain, details about anyone's health.

Payments

Stripe is the seller and merchant of record for iiwii purchases through Stripe Managed Payments. Stripe collects and processes your payment and billing details, calculates any applicable VAT and issues receipts, under its own privacy policy. We receive confirmation of your subscription status but not your full card details.

Why we use it

To provide your workspace, guided onboarding and reviews (contract), to run and secure the service (legitimate interests), to measure marketing (your consent, which you can withdraw at any time by clearing this site's storage in your browser), and to contact you about early access if you asked us to (consent).

Workspace content about your staff

For the people a customer records in their workspace, such as staff, contractors and advisers, the customer is the controller and we act as their processor, following the data processing terms in our Terms of service. We are the controller for account, early-access, billing status and analytics data.

Trusted contacts

With Key Person Continuity, a founder can record trusted contacts, such as a partner, family member, co-founder or successor. We collect their name, their relationship to the founder, and any email address and phone number the founder enters. If the founder invites them, we also hold their account email and the date they accepted. The founder is the controller of this information and is responsible for telling their trusted contacts that they have been recorded. Trusted contacts can read the founder's plan and Handover Pack only, and the founder can remove their access at any time. iiwii never stores passwords or credentials.

Processors we use

• Stripe: merchant of record for payments, billing and VAT.
• Lovable, with Supabase, for application hosting, database, authentication and storage. Your workspace database is hosted in the European Union (Ireland). Application pages are served through a global content delivery network.
• OpenAI, through the Lovable AI gateway, for optional AI pre-fill: only the text and files you choose in the setup wizard, sent once when you press the button, so it can propose entries for you to confirm. iiwii does not use this to train models. The provider may keep requests for up to 30 days, and longer if its safety systems flag them.
• Our conversion tracker, operated by Cardiff Giant Ventures Ltd on a separate database, receives analytics events only if you accept.

We do not sell personal data.

Connected tools (optional)

• Google Workspace: if an admin connects it, we read each user's name, email, admin role, whether 2-step verification is on, whether the account is suspended and when they last signed in. We read no email, files or calendars, and access is read-only. We store only names, emails, roles and those security flags, re-check monthly, and show what we find as proposals you accept or reject.
• A Google Workspace super admin must grant consent for the organisation. You can revoke access at any time by disconnecting in iiwii or in the Google Admin console under Security, API controls. Disconnecting deletes the synced data; entries you accepted stay in your workspace.
• Nango Inc. handles the connection as our processor. It is hosted in the United States and holds the OAuth access tokens; iiwii never sees or stores them. Transfers rely on the EU-US Data Privacy Framework and its UK Extension. We read through Nango's proxy and keep nothing in Nango's record cache.

Public sources we query

• Companies House: if you enter a UK company number, we fetch that company's public record (company details, officers, people with significant control and filing deadlines) and show it as proposals you accept or reject.
• Domain checks: for the domain you enter, we query public registration records (RDAP) and public DNS records (MX, NS, SPF and DMARC) at setup and monthly. Results are saved in your workspace as dated evidence.

Documents for AI pre-fill

Files you choose for AI pre-fill are sent directly to the AI provider for that one request and are not saved in our storage, so there is nothing to delete afterwards. Only the entries you accept are saved to your workspace, and you can edit or delete those at any time.

International transfers

Some of our processors, or their sub-processors, may access data from outside the UK, including the United States. Where that happens we rely on UK adequacy regulations, or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with each provider's security measures.

Who can see it

Members of your workspace, and our operators who write onboarding and periodic reviews.

Retention

• Workspace data is deleted 90 days after a subscription ends, unless you ask us to delete it earlier.
• Early-access list entries are kept until you unsubscribe or for 24 months, whichever comes first.
• Payment records are kept by Stripe under its own retention rules.

Your rights

Workspace owners can export the whole workspace as a file and request its deletion from their account page. We complete deletion requests within 30 days. You can also ask to access, correct or delete your data, or object to its use, by emailing us, and you can complain to the Information Commissioner's Office.