Privacy Policy

Last updated: 11 June 2026

Vindivo Limited ("Start My Claim", "we", "us", "our") operates the Start My Claim platform at startmyclaim.ai. We are the data controller for the personal data we collect about you.

Vindivo Limited is registered with the Information Commissioner's Office (ICO). Registration reference:

(ZA reference to be added on receipt).

If you have questions about this Privacy Policy or how we handle your data, contact us at

hello@startmyclaim.ai

We collect the following types of personal data:

• Your name and email address when you register
• Authentication data (password hash managed by our authentication provider, Supabase)
• Details you enter about your case — depending on the track, this can include employer / defendant / sending bank, job title, amount claimed, key dates, and the facts of your case
• Documents and content you generate using the platform
• Files you upload to the Document Vault

Sensitive information

Depending on the nature of your claim, the case information you provide may include sensitive details such as your age, sex, race, ethnicity, religion, disability, or health conditions (for example, if you are bringing a discrimination claim under the Equality Act 2010). We process this information only to the extent necessary to help you build your case, and only on the basis of your explicit consent (see Section 4).

• Which features you use and when
• Your browser type and IP address (collected automatically)
• Payment is processed by Stripe. We do not store your card number or payment details — only the payment confirmation and plan status.

We use your personal data to:

• Provide and operate the Start My Claim platform
• Generate AI-assisted documents and analysis based on your case information
• Process payments and manage your account
• Send you essential service communications (e.g. password reset, payment confirmation)
• Improve the platform and fix issues (using aggregated, anonymised usage data)
• Comply with legal obligations

We will not sell your personal data to third parties. We do not use your case information to train AI models without your explicit consent.

We process your personal data on the following lawful bases under UK GDPR:

• processing your account and case data to provide the service you have signed up for
• Legitimate interests:
• improving our platform and preventing fraud
• where we are required to retain data by law
• where we ask for your consent for optional communications (e.g. marketing emails)
• for any sensitive or special category data (such as protected characteristics under the Equality Act 2010) that you choose to include in your case information

We use the following trusted third-party services to operate the platform. Each is a data processor acting on our instructions:

• — our database and authentication provider. Your data is stored on Supabase servers in the EU/EEA. Supabase is ISO 27001 certified and SOC 2 compliant.
• — the AI system that generates document drafts and analysis. When you use an AI tool, the relevant case information you provide is sent to Anthropic's API to generate a response. Anthropic is a US company; data transfers are covered by Standard Contractual Clauses. Anthropic does not use your data to train their models by default.
• — payment processing. Your payment details are processed directly by Stripe Payments UK Ltd (FCA authorised) and are not stored by Start My Claim. Stripe also collects device data for fraud prevention purposes. Payment is subject to
• Stripe's Terms of Service
• Google Analytics (GA4)
• — we use Google Analytics to understand how visitors find and navigate Start My Claim. Google Analytics collects anonymised usage data (page views, session duration, referral source) and IP address. This is only activated if you accept cookies. Google is a US company; data transfers are covered by Standard Contractual Clauses.
• — we use Google Ads conversion tracking to measure whether our advertising is effective (i.e. whether someone who clicked an ad went on to sign up). This does not involve ad retargeting or behavioural profiling. This is only activated if you accept cookies. Data transfers are covered by Standard Contractual Clauses.

We retain your account and case data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. for accounting or legal compliance purposes).

You can request deletion of your data at any time by emailing

As a UK data subject, you have the following rights:

• request a copy of the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data ("right to be forgotten")
• ask us to restrict how we process your data
• receive your data in a portable format
• object to our processing of your data where we rely on legitimate interests
• where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at

. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at

We take the security of your data seriously. We use industry-standard encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

If you suspect unauthorised access to your account, please contact us immediately at

In the event of a personal data breach that is likely to affect your rights or freedoms, we will notify the ICO within 72 hours and inform you without undue delay where required by UK GDPR.

We use the following cookies on Start My Claim. Essential cookies cannot be declined as they are required for the platform to function. Analytics and advertising cookies are only set if you click "Accept" on the cookie banner.

You can control or delete cookies at any time through your browser settings. Declining analytics and advertising cookies has no effect on your use of Start My Claim.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notice on the platform. The date at the top of this page shows when the policy was last updated.