Privacy Policy

Last updated March 2026

Who we are

ComplaintForge is operated by Oshylabs Ltd, a company registered in England and Wales. Company Registration Number: 16883720. ICO Registration Number: C1892619.

Contact: privacy@complaintforge.app

What data we collect

• Account data: your email address when you register
• Complaint data: the email chains, WhatsApp messages and text you paste into the platform to generate your complaint letters
• Payment data: payment is processed by Stripe. We do not store your card details. We retain records of transactions (amount, date, product purchased)
• Usage data: pages visited, actions taken within the app (no advertising tracking, no third-party analytics)

Why we collect it and our legal basis

• To provide the ComplaintForge service: contract performance (Article 6(1)(b) UK GDPR)
• To process payments: contract performance
• To send transactional emails (login links, receipts): legitimate interests
• We do not use your data for marketing without your explicit consent

How your data is processed

Your complaint text is sent to Anthropic's Claude AI API solely to generate your complaint letter. Anthropic does not use API data to train its AI models. See Anthropic's privacy policy at anthropic.com/privacy.

Data storage and retention

• All data is stored on Supabase servers located in the EU (Ireland, AWS eu-west-1)
• Complaint data and generated documents are retained for 2 years then automatically deleted
• You can request deletion of your data at any time by emailing privacy@complaintforge.app

Third parties we share data with

• Supabase (database and file storage) — EU servers, SOC2 compliant
• Stripe (payment processing) — PCI DSS compliant
• Anthropic (AI document generation) — data not used for training
• Resend (transactional email) — email delivery only

Cookies

We use strictly necessary session cookies only to keep you logged in. We do not use advertising cookies, tracking cookies, or third-party analytics. No cookie consent banner is required as we only use essential cookies.

Your rights under UK GDPR

You have the right to: access your data, correct inaccurate data, request erasure, data portability, and to object to processing. Contact privacy@complaintforge.app to exercise any of these rights.

You also have the right to lodge a complaint with the ICO at ico.org.uk.

Changes to this policy

We will notify you by email of any material changes to this privacy policy.