Privacy notice
Effective 8 September 2026. Controller: Electric Car Home Ltd, trading as Cleantech Content. Company and contact details are in our terms.
Free pilot information
We process request IP addresses at the hosting layer, an experiment-scoped hashed IP identifier for trial allocation, token hashes, query and request identifiers, saved responses, usage events, optional acquisition tags and security logs. Hashes are pseudonymous, not anonymous. Do not put personal information in queries or acquisition tags.
The free trial asks for no name, email address, wallet or card details. Paid customers supply the additional information described below. If you contact us, we process the details needed to answer you.
Why we process it
We use this information to deliver and recover responses, enforce limited free use, prevent abuse and assess whether the service is useful. We rely on contract where necessary to deliver the service to an individual, and legitimate interests for proportionate security, business correspondence and evaluating the experiment. We do not use trial activity for unsolicited marketing.
Providers
Cloudflare hosts requests and Supabase stores application records in our existing project. Their infrastructure, support, logs and subprocessors may process information outside the UK; a database location does not describe all processing. Provider contracts and applicable transfer safeguards govern that processing. We do not install advertising cookies or send trial queries to a language model.
Retention
We will review trial identifiers, detailed events and saved free responses for deletion or minimisation by 5 January 2027, 90 days after the experiment ends. This is an operator review, not a claim of an automated deletion system. A security incident or unresolved request may require documented longer retention. Provider logs and backups follow their separate retention processes.
Your rights
Contact david@cleantechcontent.co.uk to request access, correction, deletion, restriction or portability where applicable, or object to processing based on legitimate interests. We may need proportionate evidence to locate and authenticate your records. Never send a private key or seed phrase. You can complain to the Information Commissioner's Office.
Paid customer information
In addition to free-trial processing, we collect the business legal name, contact email, business address, country/subdivision/postcode where supplied, business-use declaration, wallet address or hash, signed-message verification result, policy version, customer-token hash and payment/recovery/receipt records. Registration signatures and payment credentials are processed transiently by the application; do not interpret that as a guarantee that all provider systems are log-free. We do not store wallet private keys or ask for seed phrases. Public blockchain transfers are visible outside this service and cannot be erased by us.
We use customer information for service delivery, eligibility, payment recovery, abuse prevention and required accounting. Contract applies where needed to serve an individual business customer; legitimate interests apply to business contacts, proportionate security and evaluation; legal obligation applies to required accounting/tax records. Existing access/correction/erasure/objection and complaint contacts remain available.
Cloudflare hosts the API, Supabase stores application data, Coinbase/CDP verifies and settles payments, and GitHub Actions/Resend support operational checks and alerts. Alerts contain operational summaries rather than raw payment credentials or customer profiles. Provider infrastructure and subprocessors may operate outside the UK under applicable contracts and transfer safeguards.
After the paid recovery period, review saved results and customer information for minimisation or deletion when no unresolved settlement, dispute or legal requirement remains. Keep necessary financial evidence for the applicable statutory period, separately from full response bodies; record extended holds and next review dates. This pilot uses documented operator retention reviews rather than claiming automatic deletion. Do not reuse payment activity for unsolicited marketing.