Privacy Policy

1. Who We Are

My Claim Buddy ("we", "us", "our") is operated by Claimtech Ltd. We provide a self-service platform to help UK consumers make motor finance mis-selling claims. We are the data controller for the personal data we collect through our website and services.

Contact: support@myclaimbuddy.co.uk

2. Data We Collect

We collect the following personal data when you use our service:

• Account information: email address, name
• Claim details: lender name, finance type, agreement dates, vehicle information
• Financial information: date of birth, addresses (for claim identification purposes)
• Uploaded documents: supporting evidence you choose to attach to your claims
• Payment information: processed securely by Stripe — we do not store card details
• Usage data: pages visited, features used, AI chat conversations

3. How We Use Your Data

• To provide our claim letter generation service
• To operate the AI chat assistant that helps with your claims
• To send you email communications (magic link login, claim reminders, service updates)
• To process payments
• To improve our service and fix issues

Our lawful bases for processing under UK GDPR are: contract performance (providing the service you signed up for), legitimate interests (improving our platform), and consent (for marketing communications).

4. Third-Party Services

We share data with the following third parties, only as needed to provide our service:

• Stripe — payment processing (PCI DSS compliant)
• Mailgun — email delivery (magic links, reminders)
• Anthropic (Claude) — AI chat assistance (conversations are not used to train AI models)
• Amazon Web Services (S3) — secure file storage for uploaded documents
• Neon — database hosting (EU region)
• Vercel — application hosting

5. Cookies

We use the following cookies:

• session — essential authentication cookie, expires when you close your browser
• mcb_ref — tracks which referral link brought you to us, expires after 30 days

We do not use advertising cookies or third-party tracking cookies.

6. Data Retention

We retain your account and claim data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, email us at support@myclaimbuddy.co.uk. We will respond within 30 days.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication (JWT tokens), and encrypted data storage. Payment processing is handled by Stripe, which is PCI DSS Level 1 certified.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website.

10. Complaints

If you have concerns about how we handle your data, please contact us first at support@myclaimbuddy.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.