Privacy Policy

1. Introduction

Pepperose LTD (Company Registration Number: 06112811), trading as UtilixAI, is committed to protecting the privacy and security of your personal data. We are registered in the United Kingdom at The Maylands Building, Office 42, Maylands Avenue, Hemel Hempstead HP2 7TG, UK.

This Privacy Policy is issued in compliance with the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679). Pepperose LTD acts as the data controller for the personal data collected through UtilixAI.

UtilixAI is offered as a one-time purchase of $19.99 (USD) for lifetime access. There is no subscription, no recurring billing, and no trial period associated with the service.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you create an account or make a purchase, we may collect the following personal data:

• Name -- your first and last name as provided during registration or checkout.
• Email address -- used for account creation, login, purchase confirmation, and customer communications.
• Country -- your country of residence, used for tax compliance and to provide region-appropriate service.
• Order information -- details related to your one-time purchase of $19.99, including order reference, purchase date, and transaction status.

2.2 Payment Data

Payment is processed through PCI-DSS compliant third-party payment processors. We accept credit cards, debit cards, Apple Pay, and Google Pay. Pepperose LTD does not store your full card number, CVV, expiration date, or other sensitive payment credentials on its servers. We may receive and store a truncated card number (last four digits), card type, and transaction confirmation from the payment processor for record keeping and support purposes.

2.3 Automatically Collected Data

When you use UtilixAI, certain data may be collected automatically, including:

• IP address -- collected for security, fraud prevention, and analytics purposes.
• Browser type and version -- to ensure compatibility and optimize the user experience.
• Operating system -- for technical support and compatibility.
• Pages visited and usage patterns -- to understand how users interact with the service and to improve functionality.
• Device information -- device type, screen resolution, and language settings.
• Referring URL -- the page that directed you to UtilixAI.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Providing the service: To create and maintain your account, process your one-time purchase, and grant you access to UtilixAI features.
• Purchase processing: To verify payment, confirm your order, and issue receipts for your $19.99 purchase.
• Customer support: To respond to your inquiries, troubleshoot issues, and provide assistance.
• Service improvement: To analyze usage patterns, identify bugs, and enhance the features and performance of UtilixAI.
• Security and fraud prevention: To detect and prevent unauthorized access, abuse, or fraudulent activity.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, including tax obligations and data protection requirements.
• Communications: To send you important notices related to your purchase, account security, changes to our terms or policies, and service updates. Because these communications are essential to your use of the service, you may not opt out of receiving them.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

Under the GDPR and UK GDPR, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary to fulfill our agreement with you -- specifically, to process your one-time purchase of $19.99 and to provide access to UtilixAI.
• Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate interests, including improving our service, ensuring security, and preventing fraud, provided that these interests are not overridden by your rights and freedoms.
• Legal obligation (Art. 6(1)(c) GDPR): Processing is necessary to comply with legal obligations to which we are subject, such as tax reporting and responding to lawful requests from authorities.
• Consent (Art. 6(1)(a) GDPR): Where you have provided explicit consent for specific processing activities, such as receiving optional marketing communications. You may withdraw consent at any time.

5. Cookies & Local Storage

UtilixAI does not use traditional HTTP cookies for tracking or advertising purposes. Instead, we use sessionStorage and localStorage (browser-based storage mechanisms) to maintain your session state, store your preferences, and ensure the proper functioning of the application.

• sessionStorage: Stores temporary data for the duration of your browser session. This data is automatically deleted when you close your browser tab.
• localStorage: Stores persistent preferences and settings on your device. This data remains until you manually clear it or until the application removes it.

These storage mechanisms are strictly functional. They do not track you across websites, do not serve advertisements, and do not share data with third parties. No third-party tracking cookies are used by UtilixAI.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account data: Retained for as long as your account is active and for a reasonable period thereafter to enable reactivation or to address post-purchase support requests.
• Purchase records: Retained for a minimum of 6 years in compliance with UK tax and accounting regulations.
• Uploaded documents: Documents you upload for processing are stored temporarily and are automatically deleted within a reasonable period after processing is complete. We do not retain copies of your documents indefinitely.
• Usage data: Anonymized or aggregated usage data may be retained indefinitely for analytics and service improvement.

If you request deletion of your account and personal data, we will comply within 30 days, except where retention is required by law.

7. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encrypted storage of sensitive data at rest.
• PCI-DSS compliant payment processing through third-party providers.
• Regular security assessments and monitoring of our infrastructure.
• Access controls that restrict employee access to personal data on a need-to-know basis.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. International Transfers

Pepperose LTD is based in the United Kingdom. If you access UtilixAI from outside the UK, your personal data may be transferred to, stored in, and processed in the UK or other countries where our service providers operate.

Where personal data is transferred outside the UK or the EU/EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include:

• Transfers to countries that have been deemed to provide an adequate level of data protection.
• Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office (ICO).
• Other legally recognized transfer mechanisms.

9. Your Rights

Under the GDPR, UK GDPR, and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at help@utilixai.com. We will respond to your request within 30 days, as required by law.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. Updated versions will be posted on our website with the revised effective date.

Where changes are material, we will notify you via email or through a prominent notice on the service. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.