Privacy Policy

Last updated: February 2026

1. Who We Are

Exolio ("we", "us", "our") operates the website exolio.com and provides AI-powered text analysis and document verification services. Our contact email for data protection enquiries is: francisco@booth.ws

2. What Data We Collect

We collect and process the following personal data:

Account and subscription data: Email address (when you sign up or subscribe via Stripe); subscription status and billing history (processed by Stripe).

Documents and text you submit: Text pasted into the Quick AI Check; documents (PDF/DOCX) uploaded for expert review; any notes or instructions you provide.

Usage data: Timestamps of submissions and scans; notification logs.

We do not collect: Your name, phone number, or physical address unless you provide it; browsing or marketing cookies.

3. Why We Collect Your Data (Legal Basis)

Under UK GDPR we process your data on these bases:

• Providing the AI scan and document review service — performance of a contract
• Processing payments via Stripe — performance of a contract and legitimate interest
• Sending email notifications about your submissions — legitimate interest (service delivery)
• Retaining documents for review — performance of a contract

4. How We Use Your Data

Email address: To verify your subscription, log you in, send submission notifications, and contact you about results.

Quick AI Check text: Processed in memory to generate a score; not permanently stored on our servers.

Uploaded documents: Stored securely for up to 30 days so our review team can analyse them and return results; then permanently deleted.

Payment data: Handled by Stripe. We do not store card details. See Stripe's privacy policy: https://stripe.com/gb/privacy

5. How We Store and Protect Your Data

Uploaded documents are stored in a secured environment with restricted access. Only authorised Exolio personnel can access them for completing your review. Subscription verification uses the Stripe API over encrypted connections; email notifications are sent via encrypted SMTP (TLS).

6. Data Retention

• Uploaded documents: 30 days from submission, then permanently deleted
• Submission records (email, timestamp, notes): Retained for service and billing; deleted on request
• Quick AI Check text: Not stored — processed in memory only
• Stripe data: Managed by Stripe per their retention policy

7. Third-Party Services

We use: Stripe (payments) — https://stripe.com/gb/privacy; Vercel (hosting); Supabase (auth and database); Gmail/Google (email); Hugging Face (AI model). We do not sell or share your personal data with other third parties.

8. Your Rights Under UK GDPR

You have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent where applicable. To exercise these rights, email francisco@booth.ws. We will respond within 30 days.

9. Cancelling Your Subscription

You can cancel at any time via the Stripe Customer Portal (from our website) or by emailing us. Cancellations take effect at the end of your current billing period.

10. Children's Data

Exolio is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Complaints

You may lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk — Helpline: 0303 123 1113

13. Contact Us

For questions about this privacy policy or your personal data: Email: francisco@booth.ws

← Back to home