Privacy Notice

1. Who we are

NETRIAM LTD (“Netriam”, “we”, “us”) provides AI-assisted document intelligence software for organisations and people working in a business or professional capacity. We are registered in England and Wales under company number 17432800. Our registered office is Unit C, Blackett Street, Manchester, United Kingdom, M12 6AE.

Privacy enquiries can be sent to support@netriam.com.

2. Our role

Netriam is the data controller for information used to operate accounts, provide support, administer subscriptions, secure the service and communicate with customers. Where a customer uploads documents containing personal data for Netriam to process on its instructions, the customer is normally the controller and Netriam acts as its processor. Customers are responsible for having a lawful basis to upload and use that content.

3. Information we process

• Account and organisation details, including names, work email addresses, roles and authentication records.
• Documents, images, procedures, rules and other content submitted by customers, plus extracted fields, review decisions, audit findings and exports.
• Subscription, transaction and billing identifiers. Netriam does not store full payment-card details.
• Support requests, feedback, notifications and service communications.
• Security, operational and audit-log information such as actions, timestamps and technical error data.

4. Why we process information

We use information to provide and secure the service, process documents at the customer's request, manage accounts and subscriptions, deliver support, prevent misuse, maintain audit records, comply with law and improve reliability.

Our lawful bases, depending on the activity, are performance of a contract, compliance with legal obligations and our legitimate interests in operating, supporting and protecting Netriam. Where Netriam acts as a processor, we process personal data under the customer's documented instructions.

5. AI-assisted processing

Customer documents may be sent to our contracted AI provider to perform extraction, classification, quality review and advisory audit functions. Netriam does not use customer content to train its own models and does not authorise its AI provider to train models on content submitted through the service. Netriam's outputs are advisory: manual uploads require human Confirmation before export, and Netriam does not make legally binding decisions or certify compliance.

6. Service providers and transfers

We use service providers to host and deliver Netriam, including Supabase for database, authentication and storage; Vercel for application hosting; Anthropic for AI processing; Stripe for payments and subscription management; and Resend for transactional email. We disclose only the information reasonably required for each provider's role.

Some providers may process information outside the United Kingdom. Where required, we rely on recognised adequacy arrangements or appropriate contractual safeguards.

7. Retention and deletion

We retain account and operational information while an account is active and as needed to provide the service. Original uploaded source files are normally removed from active storage after processing and its short retry period; structured results and generated records remain available to the customer. Following the end of paid service, organisation data is retained for the period shown for the customer's plan—normally 30 to 180 days—before scheduled deletion. Customers may also use the in-product deletion controls.

Limited billing, transaction, security or legal records may be kept for longer where required by law, to resolve disputes or to protect legal rights. Residual encrypted backup copies may remain until the applicable backup cycle expires.

8. Cookies

Netriam uses essential cookies and similar storage needed for authentication, session security and core service operation. The current service does not use advertising cookies or non-essential analytics cookies. Essential cookies cannot be disabled through a consent banner because the requested service would not work without them.

9. Your rights

Subject to applicable law, you may have rights to access, correct or erase personal data, restrict or object to processing, and receive portable data. Where information is controlled by your employer or another Netriam customer, contact that organisation first. For information controlled by Netriam, email support@netriam.com.

You may complain to the UK Information Commissioner's Office at ico.org.uk.

10. Changes

We may update this notice when the service or legal requirements change. We will publish the revised notice here and change the date above; material changes may also be communicated through the service or by email.