Privacy Policy
Last updated: 16/12/2025
This Privacy Policy explains how CompanyAIO ("we", "us", "our") collects, uses and protects personal data when you use our website and product. We are committed to complying with the UK General Data Protection Regulation (UK GDPR).
1. Who we are
CompanyAIO is a software platform that helps UK companies manage compliance tasks, deadlines and documents in one place.
2. Data we collect
We may collect and process the following categories of data:
- Account data – name, email address, password hash and basic profile details.
- Company data – company name, number, status and other details imported from Companies House or entered by you.
- Usage data – how you use the product, pages visited, actions taken (for analytics and product improvement).
- Support data – messages you send to us for help or feedback.
3. How we use your data
We use your data to:
- Provide and maintain the CompanyAIO service.
- Send essential communications about your account and company deadlines.
- Improve the product and understand usage patterns.
- Meet legal obligations, including record-keeping for compliance purposes.
4. Legal bases for processing
Under UK GDPR, we rely on the following legal bases to process personal data:
- Contract – to provide the service you sign up for.
- Legitimate interests – to improve the product, prevent abuse and ensure security.
- Consent – where required for specific communications or optional analytics.
5. How we share data
We do not sell your personal data. We may share data with trusted service providers who help us run CompanyAIO (for example, cloud hosting, analytics, email delivery), under appropriate data processing agreements.
6. Data retention
We keep personal data for as long as necessary to operate the service and meet legal obligations. You can request deletion of your account data at any time, subject to certain legal requirements.
7. Your rights under UK GDPR
You have rights including to:
- Access the personal data we hold about you.
- Request corrections if data is inaccurate.
- Request deletion in certain circumstances.
- Object to or restrict certain types of processing, including direct marketing.
To exercise your rights, contact us at privacy@companyaio.com.
8. Security
We take appropriate technical and organisational measures to protect personal data, but no online service is completely risk-free. You remain responsible for keeping your login credentials secure.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above.
10. Contact details
If you have questions about this policy or how we handle your data, email us at privacy@companyaio.com.