Privacy Policy

1. Introduction

Beluga ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our services. We comply with UK GDPR and the Data Protection Act 2018.

2. Data we collect

We collect information you provide and, when bank linking is available, data received through Open Banking. During the waitlist phase this primarily means:

• Waitlist: name, email, and optional marketing consent
• Contact form: name, email, and message
• Later (when you link banks): balances, transactions, and account identifiers — never bank login passwords

We never see or store your bank login credentials. Waitlist signup does not connect a bank account.

2b. Waitlist and marketing consent

If you join the Deepsight AI Waitlist, we store your details in Firestore to notify you about early access. The optional marketing checkbox (if selected) allows product updates and tips. You may request deletion or withdraw marketing consent by contacting us using the details below. See also Contact.

3. How we use your data

We use waitlist data to communicate early access. When the product is live, we will use linked account data to power dashboards and planned Deepsight AI insights. We may use anonymised or aggregated data for analytics. We do not sell your personal data.

4. Storage and security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use industry-standard security practices and comply with FCA requirements for handling financial data.

5. Your rights

You have the right to access, correct, delete, or export your data. You can revoke bank access at any time. Contact us at our contact page for requests.

6. Contact

For privacy questions, visit our Contact page or email the address provided there.