Privacy Notice

Last updated: 2 July 2026.

DARCY AI LIMITED (Company No. 13757914), registered office Enlightened Business Park, Palehouse Common, Framfield, East Sussex, TN22 5QZ ("we", "us") is the data controller for personal data processed through the DARCY platform.

Categories of personal data we collect

Account details: name, email, workspace membership
Usage data: pages viewed, actions taken, IP address, device
Content you upload: invoices, bookings, leave records, visitor details
Payment metadata (processed by Paddle — we do not see full card details)

How we use it and legal bases

We process personal data to provide and secure the Service (performance of contract), to prevent fraud and abuse and improve the product (legitimate interests), to comply with legal and tax obligations (legal obligation), and to send service or marketing communications (consent, where required).

Who we share it with

Sub-processors that host and operate the Service (e.g. Cloudflare, Supabase, Mailgun, Google AI)
Paddle.com Market Limited, our payments Merchant of Record, for subscription management, invoicing and tax compliance
Professional advisers (legal, accounting) where necessary
Authorities where required by law

International transfers

Where personal data is transferred outside the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate additional safeguards.

Retention

Data is retained while your workspace is active and for a limited period after deletion (typically up to 6 years for financial records) in line with statutory requirements, after which it is deleted or anonymised.

Security

We apply appropriate technical and organisational measures including encryption in transit, encryption at rest for sensitive tokens, role-based access control, and audit logging.

Cookies

We use essential cookies to keep you signed in. We do not use advertising cookies. Analytics cookies, where present, respect your browser preferences.

Your rights

Under UK/EU data protection law you may request access, rectification, erasure, restriction, portability, objection, or withdraw consent at any time. You may also complain to the UK ICO or your local supervisory authority. Contact hello@darcy.com.ai; we aim to respond within one month.