Privacy Policy

Effective 10 June 2026

We collect as little as we can, we're honest about it, and we never sell your data.

Where Beagles Dare Ltd (“we”, “us”), registered in England & Wales (company no. 11038022)
Made in Oxford · Hosted in Amsterdam , with registered office at Unit 6 Heritage Business Centre, Belper, Derbyshire DE56 1SW, United Kingdom, is the data controller for Fly Away Paul. This policy explains what we hold, why, and your rights under UK GDPR and the Data Protection Act 2018. Contact: [email protected].

1. What we collect

Account data — your name, email, and sign-in credentials (we support passkeys and magic links; we don't store passwords).
Workspace data — your country/timezone and the “about you” details you give us during onboarding, used to tailor research and currency.
Research & outreach data — the briefs you write, the businesses Paul researches for you, the drafts produced, what you send, and the outcomes you choose to tell us about.
Billing data — your wallet balance and transaction history. Card details are handled by Stripe, not stored by us.
Technical data — basic logs needed to run and secure the Service.

2. Information about the businesses you research

To do its job, Paul gathers publicly available information about the businesses you ask about (e.g. from their websites, directories and the open web). Where this includes personal data (such as a business contact's name or work email), we process it on your instructions to provide the Service. You decide who to contact and are the controller for your outreach; you're responsible for having a lawful basis (typically legitimate interests for business-to-business contact) and for honouring opt-outs — see our Acceptable Use Policy. We never sell this data, and we suppress anyone who opts out.

3. Why we process it (lawful bases)

Contract — to provide the Service you've signed up for.
Legitimate interests — to run, secure and improve the Service, and to support you, balanced against your rights.
Legal obligation — to meet our tax, accounting and compliance duties.

4. The processors we rely on

We use a small set of trusted providers who process data on our behalf under contract:

Anthropic — the AI that powers Paul's research and drafting.
Resend — sending email on your behalf and recording deliverability.
Stripe — payments.
Railway — hosting and our database.
Cloudflare — DNS and network security.

Some of these are based outside the UK/EEA; where data is transferred internationally, it is protected by appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum or equivalent).

5. Keeping it, and securing it

We keep your data while your account is active and for as long as needed for the purposes above (and to meet legal duties, e.g. billing records). When you close your account we delete or anonymise your data within a reasonable period, except where we must retain it by law. We use sensible technical and organisational measures to protect it; no system is perfectly secure, but we take it seriously.

6. Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or port your data, and object to certain processing. To exercise any of these, email [email protected] and we'll respond within the legal timeframe. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we'd rather sort it out with you first.

7. Cookies & tracking

We keep this light. We use only what's needed to sign you in and run the Service (e.g. a token kept in your browser). We don't run advertising trackers on the app.

8. Changes

If we change this policy materially, we'll let you know by email or in-app. The “effective” date above always reflects the current version.