Privacy Notice

This notice explains how Peech (“we”, “us”) handles personal data in connection with the Peech workspace. Peech is the data controller for the personal data described here, meaning we decide why and how it is processed.

1. Data we collect

• Account data — name, email address, login credentials and workspace settings.
• Content you provide — domains, notes, company and contact records, and the messages you compose and send through the Service.
• Mailbox data — where you connect your own mailbox, the sending credentials you supply and the messages synchronised for your inbox view.
• Usage and technical data — feature usage, log and telemetry data, device identifiers and IP address.
• Support data — messages you send us and related correspondence.

Payment card details are collected and processed by Paddle, not by us; we never see or store your card number.

AI processing. Where you use the AI features, the domains, company records, notes and prompts involved are sent to our AI providers to generate valuations, research and draft messages. We do not use your workspace content to train third-party AI models.

2. Why we use it and our legal bases

• Creating and managing your account and providing the Service — performance of a contract.
• Billing, subscription management and invoicing — performance of a contract and legal obligation.
• Security, abuse prevention and fraud detection — legitimate interests in protecting the Service and its users.
• Product improvement, diagnostics and analytics — legitimate interests in maintaining and improving the Service.
• Customer support — performance of a contract and legitimate interests.
• Marketing communications, where applicable — consent, withdrawable at any time.

3. Who we share data with

• Service providers and subprocessors — hosting, database, email delivery, AI processing and analytics providers acting on our instructions.
• Merchant of Record — Paddle.com, which handles the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal, accounting and similar advisers where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and workspace data for as long as your account is active and for a limited period afterwards to handle disputes and meet legal obligations. Billing records are kept for the period required by tax and accounting law. When data is no longer needed it is deleted or anonymised.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent where processing is based on consent. To exercise any of these rights email peech@peech.org; we respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, row-level database authorisation, and server-side storage of mailbox credentials that are never returned to the browser. No system is perfectly secure, but we work to keep risk low.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to maintain your session and preferences. Where we use analytics or marketing cookies, they are set only with your consent and you can change your preferences or clear them in your browser at any time.

9. Contact

Privacy questions and requests: peech@peech.org.