Autidly provides compliance automation software for construction contractors. Our platform helps contractors manage subcontractor compliance by reading uploaded documents, extracting expiry dates, and sending reminders.

We may collect and process the following data:

From customers (contractors):

• Name, email address, phone number, and company details
• Billing information and payment details (processed securely via Stripe)
• Login credentials for account access

From subcontractor documents (uploaded by customers):

• Subcontractor names and business details
• Compliance documents (e.g., insurance certificates, accreditations, licenses)
• Expiry dates and compliance status

We use personal data for the following purposes:

• To provide access to the Autidly platform
• To process payments and manage subscriptions
• To track and display compliance status of subcontractors
• To send automated reminders of upcoming expiries
• To communicate with customers about updates, service notices, or support

We do not use subcontractor data for marketing.

We process data under the following lawful bases:

• Contract: to deliver our software and services to customers
• Legitimate interests: to improve our platform and ensure compliance tracking is effective
• Legal obligations: to comply with UK data protection law

We only share personal data with:

• Stripe (for payment processing)
• Service providers who help operate our platform (e.g., hosting and cloud services)
• Regulators or authorities if legally required

We do not sell or trade personal data.

Data is stored securely on cloud servers within the UK or EEA. We apply appropriate technical and organizational measures to protect against loss, misuse, or unauthorized access. Access to data is restricted to authorized personnel only.

We retain data as follows:

• Customer account data is retained while the subscription is active.
• Subcontractor documents are retained only as long as required for compliance tracking, after which they may be archived or deleted.
• Upon cancellation, we will delete or anonymise personal data after 14 days unless required by law to keep it longer.

Under UK GDPR, individuals have the right to:

• Access the data we hold about them
• Request correction of inaccurate data
• Request deletion of data (where legally permitted)
• Restrict or object to processing in certain circumstances
• Data portability (request a copy of data in a machine-readable format)

Requests can be made by contacting us at info@ayubautomate.co.uk.

If data is transferred outside the UK or EEA, we will ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

We may update this Privacy Policy from time to time. We will notify customers of material changes.

For questions about this Privacy Policy or to exercise your rights, please contact us at:

Autidly

info@ayubautomate.co.uk