Privacy Policy

1. Operational Core

graydr operates strictly within a B2B ecosystem data model. We provide structured JSON data feeds derived from public Financial Ombudsman Service decisions to corporate subscribers. Our platform does not target, collect data from, or offer services to individual consumers acting in a personal capacity.

2. Data Processing

We collect the following information solely to provision and maintain API credentials:

• Full name and corporate email address (for account creation and support)
• Network timestamps and API request logs (for rate limiting and abuse prevention)

All billing parameters are handled securely by Stripe, our payment processor. No credit card numbers, bank details, or other financial instrument data ever touches our servers.

3. UK GDPR Compliance

You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, or to raise any data protection concern, please direct your inquiry to sales@graydr.gbotapps.uk.

We will respond to all legitimate requests within the statutory 30-day period. Data retention is limited to the duration of your active subscription plus 90 days following account closure, after which all personal data is permanently deleted.