Privacy notice

This notice explains, in plain English, what Cardlens does with your information. Cardlens is operated by [Company name] ("we"), the data controller. Contact: [privacy email]. ICO registration number: [pending].

What we collect

• Your email address, to sign you in and, if you join the waitlist, to tell you about Cardlens.
• The credit card statements you upload, and the transactions we read from them: dates, descriptions, amounts and the last 4 digits of the card.
• Choices you make in the app, such as category corrections and which spending is for business.

We never ask for bank logins and never connect to your accounts. We never store full card numbers — they are cut to the last 4 digits as soon as a file is read.

Why we use it

To provide the service you asked for: reading your statements and building your report (performance of a contract). For the waitlist, we rely on your consent, which you can withdraw at any time.

Who processes it

• Supabase (database, file storage and sign-in), hosted in London (eu-west-2).
• Vercel (web hosting), with our server functions running in London.
• Anthropic (the Claude AI model), which reads statement files to extract transactions and writes the report summary. Statement content is sent to Anthropic for processing and is not used to train its models. For the summary we send only aggregated totals, not your transaction descriptions. Anthropic may process data outside the UK under appropriate safeguards.

We do not sell your data, show ads or use third-party trackers.

How long we keep it

Uploaded files are deleted as soon as they are processed successfully, unless you choose to keep them. Transactions and reports stay until you delete them or your account. You can delete everything at any time from Settings → Delete all my data.

Your rights

You can access, correct, export (CSV) or delete your data, object to processing, and complain to the Information Commissioner's Office (ico.org.uk). Contact us at [privacy email].