Privacy Notice
KEZARIQ is the data controller for personal data processed through KEZARIQ.
Last updated: 8 August 2026
1. Who we are
KEZARIQ operates KEZARIQ and acts as the data controller for the personal data described below. You can reach us at support@kezariq.com.
2. What we collect and why
- Account data (first name, email address, password hash) — to create and secure your account. Legal basis: performance of our contract with you.
- Project data (property address, project details, client and contractor names and contact details, drawings references, costs, notes) — to generate your documents. Legal basis: performance of our contract.
- Purchase records (which documents you unlocked, order references, amounts) — to give you access to what you bought and for our records. Legal basis: contract and legal obligation.
- Support and feedback messages — to answer you and improve the product. Legal basis: legitimate interests.
- Technical and usage data (IP address, device and browser information, error logs) — for security, fraud prevention and reliability. Legal basis: legitimate interests.
If you enter other people's details (for example your contractor or architect), please only enter what is necessary and make sure you are entitled to share it.
3. AI processing
When you ask KEZARIQ to draft a specification or other document, the relevant project text is sent to our AI model provider to generate the draft. We do not send your password, payment details or purchase history. Please avoid entering sensitive personal data (such as health or financial information) into free-text fields.
4. Who we share data with
- Paddle.com, our Merchant of Record, for the sale of our products, payment processing, tax compliance and invoicing.
- Service providers and subprocessors — hosting, database, email delivery, AI model providers, and error monitoring — acting on our instructions.
- Professional advisers such as our accountants and lawyers.
- Authorities where we are required to do so by law.
We do not sell your personal data.
5. International transfers
Some of our providers process data outside the UK and EEA. Where that happens we rely on UK adequacy regulations or on standard contractual clauses together with the UK International Data Transfer Addendum, plus appropriate technical safeguards.
6. How long we keep it
We keep account and project data for as long as your account is open, and for up to 12 months afterwards so you can recover a deleted account. Purchase and tax records are kept for 6 years as required by UK law. Other data is deleted or anonymised when it is no longer needed.
7. Your rights
Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw consent where we rely on it. You can delete your account and data yourself from your account settings, or contact us and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Security
We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls so you can only read your own records, and restricted administrative access.
9. Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in, remember your current project while you work, and process payments securely. These are essential to the service and cannot be switched off. We do not use advertising or third-party tracking cookies. You can clear this data at any time in your browser settings, though you will be signed out.