Privacy Policy

Last updated 15 September 2026

This describes what data DUEFORM collects, why, and who it's shared with. By creating an account you agree to it.

What we collect

Your name and work email, the property and portfolio data you enter or import, and the documents you upload (bills, leases, service-charge statements, utility contracts and correspondence). We also keep a record of consequential actions taken in your account — who did what, and when.

Why we collect it

To run the service: detect overpayments against official records, build and evidence a case, prepare correspondence, track its outcome, and calculate and bill any success fee owed. We don't use your data for anything beyond providing the service to you.

Who we share it with

A small number of processors run the service on our behalf: Supabase (database, authentication and file storage), Stripe (billing), an email provider (sending correspondence and notifications on your instruction), and, where configured, Anthropic (drafting correspondence and reading lease documents). None of them can use your data for their own purposes. Where a case is submitted externally, the counterparty (a billing authority, landlord, agent or supplier) receives only what that specific correspondence contains.

Retention and deletion

We keep your data for as long as your account is active. Deleting your account removes your organisation's properties, documents, cases and team access; a residual audit and billing record is kept only as required to account for fees already charged.

Your rights

You can access, correct or export your data from within the product, or by contacting us. You can request deletion at any time — see Terms for what that removes.

Security

How your data is isolated, accessed and audited is described on our Security page. Cookies are covered separately in our Cookie Policy.

Contact

Questions about this policy or your data go through our contact page.