Privacy Policy

Last updated July 2026

Who we are

ComplaintForge is operated by Oshylabs Ltd, a company registered in England and Wales. Company Registration Number: 16883720. ICO Registration Number: C1892619.

Contact: arnold.oshenye@oshylabs.eu

What data we collect

• Account data: your email address when you register
• Complaint data: the email chains, WhatsApp messages and text you paste into the platform to generate your complaint letters
• Payment data: payment is processed by Stripe. We do not store your card details. We retain records of transactions (amount, date, product purchased)
• Usage data: pages visited, actions taken within the app (no advertising tracking, no third-party analytics)

Why we collect it and our legal basis

• To provide the ComplaintForge service: contract performance (Article 6(1)(b) UK GDPR)
• To process payments: contract performance
• To send transactional emails (login links, receipts): legitimate interests
• We do not use your data for marketing without your explicit consent

How your data is processed

Your complaint text is sent to Anthropic's Claude AI API solely to generate your complaint letter. Anthropic does not use API data to train its AI models. See Anthropic's privacy policy at anthropic.com/privacy.

Data storage and retention

• All data is stored on Supabase servers located in the EU (Ireland, AWS eu-west-1)
• Complaint data and generated documents are retained for 2 years then automatically deleted
• You can request deletion of your data at any time by emailing arnold.oshenye@oshylabs.eu

Third parties we share data with

• Supabase (database and file storage). EU servers, SOC2 compliant
• Stripe (payment processing). PCI DSS compliant
• Anthropic (AI document generation), data not used for training
• Resend (transactional email), email delivery only

International data transfers

Some of the processors we use are based outside the UK and the European Economic Area, including in the United States. This applies to our payment provider Stripe, our AI provider Anthropic, and our email provider Resend. Where your personal data is transferred outside the UK or the EEA, we rely on the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses together with the EU Standard Contractual Clauses where relevant, plus any additional safeguards needed so your data keeps an equivalent level of protection. Email arnold.oshenye@oshylabs.eu for more detail on these safeguards.

Cookies

We use strictly necessary session cookies only to keep you logged in. We do not use advertising cookies, tracking cookies, or third-party analytics. No cookie consent banner is required as we only use essential cookies.

Your rights under UK GDPR

You have the right to: access your data, correct inaccurate data, request erasure, data portability, and to object to processing. Contact arnold.oshenye@oshylabs.eu to exercise any of these rights.

You also have the right to lodge a complaint with the ICO at ico.org.uk.

Changes to this policy

We will notify you by email of any material changes to this privacy policy.