Privacy Policy

Last updated: February 2026 · Version 1.0

1. Who We Are

Litigo Limited (company number 16053612), trading as GoLitigo and GL Collect, is the data controller for personal data processed through the GL Collect platform. Contact: privacy@golitigo.ai.

2. What Data We Collect

We collect the following categories of personal data:

CategoryDataLegal Basis
AccountEmail, name, company details, password (hashed)Contract (Art. 6(1)(b))
Debt detailsDebtor name, address, invoice numbers, amounts, dates, descriptionsContract (Art. 6(1)(b))
PaymentProcessed by Stripe — we do not store card detailsContract (Art. 6(1)(b))
Generated contentDebt recovery documents generated by AIContract (Art. 6(1)(b))
Usage dataPages visited, features used, timestampsLegitimate interest (Art. 6(1)(f))
Consent recordsTimestamped record of terms/disclaimer acceptanceLegal obligation (Art. 6(1)(c))

3. AI Processing — Important

When you generate a debt recovery document, the information you provide (debtor details, invoice information, debt circumstances) is sent to Anthropic's Claude AI via their API to generate your document.

Anthropic processes this data as a data processor on our behalf. Under Anthropic's data use policy for their API: your data is not used to train their AI models. Data is processed for the sole purpose of generating your response and is subject to Anthropic's data retention and security policies.

We do not send your payment information to Anthropic — only the debt and debtor details needed to generate the document.

4. Sub-Processors

ProviderPurposeLocation
SupabaseAuthentication and databaseEU (Frankfurt)
AnthropicAI document generationUSA (SCCs in place)
StripePayment processingUSA/EU (SCCs in place)
VercelHosting and edge deliveryGlobal (EU primary)

5. Data Retention

Account data and document history are retained for the lifetime of your account. If you delete your account, all personal data is permanently deleted within 30 days. Payment records are retained for 6 years as required by HMRC for tax purposes. Consent records are retained for 6 years for legal compliance.

6. Your Rights

Under UK GDPR, you have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, email privacy@golitigo.ai. We will respond within 30 days.

You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

See our Cookie Policy for details on how we use cookies and similar technologies.

8. Contact

Data Controller: Litigo Limited — privacy@golitigo.ai