← Back to Irvo

Privacy Policy

Last updated: March 2026

Irvo ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our service at irvo.co.uk.

Data We Collect

Account information (email, name, organisation name), AI system descriptions and questionnaire answers you provide, evidence documentation you upload or draft, and standard usage analytics.

How We Use It

To provide the compliance documentation service, generate risk classifications and evidence packs, process payments via Stripe, and send transactional emails via Resend. We do not sell your data.

AI Processing

System descriptions and questionnaire answers are sent to Anthropic's Claude API for risk classification and evidence drafting. This data is processed under Anthropic's data processing terms and is not used to train AI models.

Data Storage

Data is stored in Supabase (hosted in the EU) with row-level security ensuring organisation isolation. All connections are encrypted in transit (TLS 1.2+) and at rest.

Contact

For privacy enquiries: hello@irvo.co.uk