Privacy notice

Who is responsible

Data controller: Armen Sarkisian, Komitas 57, 0032 Yerevan, Armenia. Questions about your data: privacy@vitersoft.com.

Whose data this is

A dismissal file is mostly about someone who is not using this service: the employee. That is why the prototype runs in test mode and asks you to black out the employee's name, address, date of birth and National Insurance number before you upload anything. Where you are the employer, you are the controller of that data and we are your processor.

What we store, and for how long

• Your documents are not uploaded. They are read in your browser; only the extracted text of the pages the draft cites is sent to the server.
• Extracted page text and facts: deleted 30 days after the case is created.
• The case itself (your e-mail address, the draft, the dates): deleted after 60 days.
• IP addresses are never stored. Where abuse has to be counted, only a salted SHA-256 hash of the address is kept.
• You can delete everything at any moment from the link in your e-mail or the “Delete my data” link below.

Who else sees it

• Cloudflare, Inc. (USA/EU) — hosting of the application and the model that reads the text of your pages.
• Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France (the Brevo service) — sending the e-mail that carries your case link.
• PostHog (EU cloud, Germany) — anonymous usage statistics. No cookies, no profile, and event properties never carry personal data.
• Supabase (EU) — the database holding the case.

Where data is transferred outside the UK and the EEA, it is done on Standard Contractual Clauses.

Your rights

You can ask for a copy of your data, for it to be corrected, or for it to be erased — the fastest way is the delete link. Write to privacy@vitersoft.com. You may complain to the Information Commissioner's Office (ico.org.uk).