Privacy Policy
Last updated: February 2026 · Version 1.0
1. Who We Are
Litigo Limited (company number 16053612), trading as GoLitigo and GL Collect, is the data controller for personal data processed through the GL Collect platform. Contact: privacy@golitigo.ai.
2. What Data We Collect
We collect the following categories of personal data:
| Category | Data | Legal Basis |
|---|---|---|
| Account | Email, name, company details, password (hashed) | Contract (Art. 6(1)(b)) |
| Debt details | Debtor name, address, invoice numbers, amounts, dates, descriptions | Contract (Art. 6(1)(b)) |
| Payment | Processed by Stripe — we do not store card details | Contract (Art. 6(1)(b)) |
| Generated content | Debt recovery documents generated by AI | Contract (Art. 6(1)(b)) |
| Usage data | Pages visited, features used, timestamps | Legitimate interest (Art. 6(1)(f)) |
| Consent records | Timestamped record of terms/disclaimer acceptance | Legal obligation (Art. 6(1)(c)) |
3. AI Processing — Important
When you generate a debt recovery document, the information you provide (debtor details, invoice information, debt circumstances) is sent to Anthropic's Claude AI via their API to generate your document.
Anthropic processes this data as a data processor on our behalf. Under Anthropic's data use policy for their API: your data is not used to train their AI models. Data is processed for the sole purpose of generating your response and is subject to Anthropic's data retention and security policies.
We do not send your payment information to Anthropic — only the debt and debtor details needed to generate the document.
4. Sub-Processors
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database | EU (Frankfurt) |
| Anthropic | AI document generation | USA (SCCs in place) |
| Stripe | Payment processing | USA/EU (SCCs in place) |
| Vercel | Hosting and edge delivery | Global (EU primary) |
5. Data Retention
Account data and document history are retained for the lifetime of your account. If you delete your account, all personal data is permanently deleted within 30 days. Payment records are retained for 6 years as required by HMRC for tax purposes. Consent records are retained for 6 years for legal compliance.
6. Your Rights
Under UK GDPR, you have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, email privacy@golitigo.ai. We will respond within 30 days.
You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
See our Cookie Policy for details on how we use cookies and similar technologies.
8. Contact
Data Controller: Litigo Limited — privacy@golitigo.ai