Privacy Policy

1. Who we are

Mandate is operated by Pevizsla Ltd, a company registered in England and Wales, with its registered office at 1 Sir Gerald Kaufman Close, Manchester M18 7DW(“we”, “us”, or “our”). We provide a cloud-based commercial finance credit assessment platform available at pevizsla.co.uk (“the Service”).

We are the data controller for personal data collected through the Service. If you have questions about this policy, contact us at privacy@pevizsla.co.uk.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, organisation name, and password (stored securely via Clerk).
• Usage data: pages visited, features used, and session timestamps, collected automatically.
• Assessment data: financial figures, company information, deal structures, and documents you upload or enter into the Service.
• Payment data: billing information processed by Stripe. We do not store card details on our servers.
• Communications: support emails and any other correspondence you send us.

3. How we use your data

We use your personal data to:

• Create and manage your account and provide access to the Service.
• Process payments and manage your subscription.
• Deliver and improve the features and functionality of the Service.
• Respond to support requests and communicate important service updates.
• Comply with legal and regulatory obligations.
• Detect and prevent fraud or misuse of the Service.

Our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (improving the Service, security), and compliance with legal obligations where applicable.

4. Who we share data with

We share personal data only with trusted sub-processors necessary to deliver the Service:

• Clerk — identity and authentication management.
• Stripe — payment processing.
• Cloudflare — hosting, CDN, and edge infrastructure.
• Anthropic — AI-powered document extraction and credit note generation (document content is sent to Anthropic's API; no data is used to train their models under our agreement).

We do not sell your personal data to third parties.

5. Data retention

We retain your account data for as long as your account remains active. Assessment data is retained for the duration of your subscription plus 12 months to allow for data export. You may request deletion of your data at any time by contacting us at privacy@pevizsla.co.uk.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your personal data (“right to be forgotten”) where no legitimate grounds for retention exist.
• Restrict processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@pevizsla.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use strictly necessary cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. No cookie consent banner is required for strictly necessary cookies.

8. International transfers

Some of our sub-processors (including Clerk, Stripe, Cloudflare, and Anthropic) are based in the United States. Transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under UK data protection law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted data in transit (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice within the Service. The “Last updated” date at the top of this page indicates when the policy was last revised.