Privacy policy

Who we are

Consolida is operated by Jason Clowrey, United Kingdom. A limited company, Consolida AI Ltd, is being formed and will become the operator; this policy will be updated when it does.

For the purposes of UK data protection law, the operator is the controller of the personal information described here. Where you connect your own accounts and ask the desks to work on them, we process that data on your behalf to provide the service.

What we collect

• Account and contact details. Your name, email address, business name, and the details of anyone you invite to your account.
• Chat app details. Your chat id in the chat app you use with Consolida, such as Telegram, and the messages you send to the desks and receive from them, including your approvals.
• Business information you give us. For example your services, prices, opening hours, tone of voice, and anything else you tell the desks so they can do their work.
• Data from accounts you connect. Only the accounts you choose to connect, and only for the desks you turn on. These can include Google Ads, Google Analytics, Google Search Console, Shopify, your email and your social accounts. Depending on the account, this can include campaign and performance data, website traffic reports, search data, orders and products, email messages, and page details and posts.
• Billing details, once billing starts. Payments will be handled by Stripe. We will see your plan, payment status and invoices, but not your full card number.
• Support messages. What you send us when you ask for help.

Why we use it

We use your information to run the desks you enable and nothing else. In practice that means:

• reading data from your connected accounts so a desk can prepare its drafts and reports;
• sending you those drafts and acting on them only when you approve;
• with your permission, drafting posts and publishing them to the social accounts you connect, only after you approve them;
• running your account, answering support requests and, once billing starts, taking payment;
• keeping the service secure and working properly.

We do not sell your information. We do not use it for advertising. We will only send you marketing email if you ask us to, and you can stop it at any time.

Legal bases under UK GDPR

• Contract. Most of what we do is needed to provide the service you signed up for.
• Legitimate interests. Keeping the service secure, preventing misuse, and answering questions from people who are not yet customers.
• Consent. Connecting an account is your choice, and you can disconnect it at any time. We also rely on consent for any optional marketing email.
• Legal obligation. Keeping financial records once billing starts, and responding to lawful requests.

Google user data

Consolida's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This applies to data from Google Ads, Google Analytics, Google Search Console and any other Google account you connect. In plain terms:

• We use Google user data only to provide the features you turned on.
• We do not sell it.
• We do not use it for advertising, including retargeting or personalised ads.
• We do not use it to train general AI or machine learning models.
• People at Consolida read it only with your permission, for security purposes such as investigating abuse, or where the law requires.

We only pass Google user data to the service providers listed below, and only so they can help us provide the features you use. You can remove our access at any time from your Google Account permissions page, or by asking us.

Who your data passes through

We use a small number of service providers. Each one handles data only on our instructions and under a written agreement.

• Anthropic AI processing. The desks use Anthropic's models to read your data and write drafts. Anthropic does not train its models on your data under its commercial terms.
• Google Cloud and Firebase Hosting, databases, file storage and secret storage.
• Replit Hosting for parts of the service.
• Telegram Messaging between you and the desks, where you use Telegram as your chat app.
• Zoho Email, where you connect a Zoho mailbox.
• Stripe Payments, once billing starts.

We may also share information if the law requires it, or to protect the rights and safety of our users or the public. If Consolida's business is transferred, for example to Consolida AI Ltd, your information would move with it under this policy.

International transfers

Some of these providers process data outside the UK, including in the United States and the European Economic Area. Where they do, we rely on UK adequacy regulations, such as the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Agreement or Addendum, so that your information keeps the same level of protection.

How long we keep it

• We keep your information while your account is open.
• When you cancel, we revoke our access to your connected accounts straight away. Your data is deleted within 30 days of cancelling, and removed from backups within a further 30 days.
• We keep invoices and payment records for six years, because UK tax law requires it.
• You can ask us to delete your data sooner. See Your rights.
• To have data from a connected social account deleted, follow our data deletion instructions.

Security

• Sealed per business. Each business's data is kept separate. A desk working for one business cannot see another's.
• Secrets kept apart. When you connect an account, its access token is stored in Google Secret Manager under a name tied to your business, not in our database or our code.
• Encrypted. Data is encrypted in transit and at rest.
• Limited access. Only the people who run Consolida can reach the systems, and only when they need to.

No system is perfectly secure. If a breach affects your information, we will tell you and the ICO as the law requires.

This website

This website does not use cookies, analytics or trackers. It loads fonts from Google Fonts, so your browser contacts Google's servers to fetch them. Our hosting provider, Firebase, keeps standard server logs, such as IP address and browser type, for security and to keep the site running.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of your information;
• have it corrected if it is wrong;
• have it deleted;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these, email support@consolida.ai with "Privacy request" in the subject. We will reply within one month. We may need to check who you are first.

Complaints

If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We will update this policy when the way we handle information changes, and when Consolida AI Ltd becomes the operator. We will change the date at the top, and tell customers by email or in their chat app about any important change before it takes effect.

Contact

Email support@consolida.ai. You can also reach us through our support page.