Privacy Policy

This is a draft policy provided for review. It is not legal advice. Replace every [placeholder] and have it reviewed by a solicitor before publishing.

1. Who we are

Beagle is operated by Proper Platforms Limited (trading as Beagle), registered in England and Wales, company number [COMPANY NO.], registered office [ADDRESS] ("we", "us"). We are the data controller for personal data processed through Beagle. Contact us at [CONTACT EMAIL]. [If registered with the ICO: ICO registration number [NUMBER].]

2. The data we collect

• Account data: your name, email and password (passwords are stored hashed by our authentication provider).
• Content you create: shows you attend, stands you log, notes, heat and interaction tags, follow-up actions, and contacts you add.
• Dictation data: when you use Dictate, your device transcribes your speech to text. We send that text, together with relevant context (your glossary, the event's exhibitor list and your contacts), to our AI provider to return structured results. We store the transcript and the structured result against your account. You can delete a dictation at any time.
• Payment data: handled by Stripe. We do not store your card details. We hold your subscription status and a Stripe customer reference.
• Usage and device data: basic logs needed to run and secure the service.

3. Personal data about other people

Beagle lets you record details of people you meet and mention people when you dictate. Where you add another person's information, you are responsible for having a lawful basis to do so, and we process that information on your behalf to provide the service to you. Do not record special category data or anything you are not entitled to hold.

4. How we use your data and our legal bases

• To provide the service, including capture, reports and team features: performance of our contract with you.
• To generate AI debriefs and parse dictation: performance of our contract, using the AI provider described below.
• To take payment and manage subscriptions: performance of our contract.
• To secure, maintain and improve the service: our legitimate interests.
• To send you service messages: our legitimate interests. For marketing, only with your consent, which you can withdraw at any time.

5. AI processing

We use Anthropic's Claude API to parse dictation and generate reports. The relevant text is sent to Anthropic to return results. Under Anthropic's API terms, this data is not used to train its models. [Confirm this against Anthropic's current terms before publishing.] We keep AI inputs and outputs only as long as needed to provide the feature, and you can delete dictations from your account.

6. Sub-processors

We share data with the following providers to run Beagle:

• Supabase (hosting, database and authentication), data hosted in [REGION, e.g. EU/London].
• Anthropic (AI processing of dictation and reports).
• Stripe (payment processing).
• [Email provider, if any].

We have data processing terms in place with each. A current list is available on request.

7. Team workspaces

If you join a workspace, shows you mark as work, and the opportunities and follow-ups on them, are visible to your workspace administrators for reporting. Shows you keep personal are not shared with your workspace. [Phase 3, if live: where you choose to share your details with an exhibitor, those details are sent to that exhibitor; this is always opt-in and you can withdraw it.]

8. Retention

We keep your account data while your account is active. You can delete content at any time, and you can ask us to delete your account, after which we remove your personal data except where we must keep it by law. Backups are cycled within [PERIOD].

9. International transfers

Where data is transferred outside the UK (for example to a US-based provider), we rely on appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

10. Your rights

You have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. To exercise these, contact [CONTACT EMAIL]. You can complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

11. Security

We use access controls, encryption in transit and row-level security so users can only access their own data. No system is perfectly secure, but we take reasonable steps to protect your information.

12. Changes

We may update this policy and will post the new version here with an updated date.