Privacy Policy

Last updated: 1 April 2026

Vindivo Limited ("Start My Claim", "we", "us", "our") operates the Start My Claim platform at startmyclaim.ai. We are the data controller for the personal data we collect about you.

If you have questions about this Privacy Policy or how we handle your data, contact us at

We collect the following types of personal data:

• Your name and email address when you register
• Authentication data (password hash managed by our authentication provider, Supabase)
• Details you enter about your employment situation — employer name, job title, salary, key dates, and the facts of your case
• Documents and content you generate using the platform
• Files you upload to the Document Vault
• Which features you use and when
• Your browser type and IP address (collected automatically)
• Payment is processed by Stripe. We do not store your card number or payment details — only the payment confirmation and plan status.

We use your personal data to:

• Provide and operate the Start My Claim platform
• Generate AI-assisted documents and analysis based on your case information
• Process payments and manage your account
• Send you essential service communications (e.g. password reset, payment confirmation)
• Improve the platform and fix issues (using aggregated, anonymised usage data)
• Comply with legal obligations

We will not sell your personal data to third parties. We do not use your case information to train AI models without your explicit consent.

We process your personal data on the following lawful bases under UK GDPR:

• processing your account and case data to provide the service you've signed up for
• improving our platform and preventing fraud
• where we are required to retain data by law
• where we ask for your consent for optional communications (e.g. marketing emails)

We use the following trusted third-party services to operate the platform. Each is a data processor acting on our instructions:

• — our database and authentication provider. Your data is stored on Supabase servers in the EU/EEA. Supabase is ISO 27001 certified and SOC 2 compliant.
• — the AI system that generates document drafts and analysis. When you use an AI tool, the relevant case information you provide is sent to Anthropic's API to generate a response. Anthropic processes this data as a service provider; it is not used to train their models by default.
• — payment processing. Your payment details are processed directly by Stripe and not stored by Start My Claim.

We retain your account and case data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. for accounting or legal compliance purposes).

You can request deletion of your data at any time by emailing

As a UK data subject, you have the following rights:

• request a copy of the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data ("right to be forgotten")
• ask us to restrict how we process your data
• receive your data in a portable format
• object to our processing of your data where we rely on legitimate interests
• where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at

. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at

We take the security of your data seriously. We use industry-standard encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

If you suspect unauthorised access to your account, please contact us immediately at

We use essential cookies to operate the platform (e.g. to keep you logged in). We do not use advertising cookies or third-party tracking cookies. You can control cookie settings in your browser, but disabling essential cookies may prevent you from using the platform.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notice on the platform. The date at the top of this page shows when the policy was last updated.