Privacy Policy

Who controls your data

Wadalyon Ltd (company number 16734023), which operates Finalit, is the data controller for the personal data described here. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Contact: privacy@finalit.ai.

What we collect

• Account data. Your name and email address, from Google sign-in or an email magic link.
• Your content. The drafts and text you submit for assessment, any files you upload or import from a connected account, and the assessments and rewrites Finalit produces from them.
• Connected accounts. If you connect Google Drive or Notion, we store an access token so Finalit can fetch the documents you choose. We read what you select, not your whole drive.
• Usage data. Product analytics events (for example, that a review was run), plus basic device, browser and log information.
• Billing data. Your plan status and the identifiers our payment processor gives us. Card details are handled entirely by the processor; we never see or store your full card number.

Why we use it, and our lawful basis

• To provide the service you asked for: performance of our contract with you.
• To keep Finalit secure, working and free from abuse: our legitimate interests.
• To take payment and keep financial records: contract and legal obligation.
• To understand and improve the product through analytics: our legitimate interests, and your consent where the law requires it.

Where we rely on consent, you can withdraw it at any time.

We do not train on your writing

Your drafts are processed to give you a result, and that is all. We do not use your content to train AI models, we do not sell your personal data or your content, and we do not share your drafts with anyone except the providers listed below who process them on our behalf to produce your result. We have contractual terms with our AI providers that prohibit training on data sent through their APIs.

Who processes your data

We use a small number of trusted providers to run Finalit: hosting, database and authentication, payments, analytics, and the AI providers that generate assessments and rewrites. The current list, including what each one does and where it processes data, is on the Subprocessors page. Some process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep your account and content while your account is active, so your work is there when you come back. You can delete individual drafts at any time, and deleting your account removes your drafts and assessments. We keep limited records we’re legally required to retain, such as billing records for tax purposes, and backups are cleared on a rolling basis.

Your rights

Under UK GDPR you can access, correct, delete, export or restrict processing of your personal data, and object to processing we base on legitimate interests. Email privacy@finalit.aiand we’ll respond within one month. You can also complain to the UK Information Commissioner’s Office at ico.org.uk, though we’d rather you gave us the chance to put it right first.

Security

Your data is encrypted in transit and at rest, access is limited to the people who need it to run the service, and drafts are private to your account unless you choose to share them. No service can promise perfect security, and we don’t.

Children

Finalit isn’t intended for children under 16, and we don’t knowingly collect their personal data. If you believe a child has given us data, tell us and we’ll delete it.

Changes

We’ll post updates here with a new date, and tell you directly about material changes.