Privacy Policy

1. Who We Are

OfferSheet AI is operated by Rodor Technologies Ltd, a company registered in England and Wales. References to “we”, “us”, or “our” in this policy refer to Rodor Technologies Ltd.

If you have any questions about how we handle your personal data, please contact us at ross@ellner.co.uk.

2. Personal Data We Collect

When you register for or use OfferSheet AI, we may collect the following categories of personal data:

• Identity data — your name and business name.
• Contact data — your email address, phone number, and business address.
• Offer and fixture details — information you paste into the platform, including vessel, charterer, cargo, laycan, freight rate, demurrage, laytime, commissions, and related terms.
• Financial data — payment information processed via Stripe (we do not store card details ourselves).
• Usage data — how you interact with the OfferSheet AI application, including pages visited, features used, and session activity.
• Communications data — messages or support requests you send to us.

We only collect data that is necessary to provide the OfferSheet AI service or to comply with a legal obligation.

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your OfferSheet AI account.
• To provide the OfferSheet AI service, including raw message intake, AI-assisted offer-term extraction, mandatory review, PDF generation, and email sending.
• To process subscription payments and maintain your billing history.
• To send you transactional emails (e.g. account confirmations, password resets, and invoice notifications) via our email provider, Resend.
• To improve and develop the OfferSheet AI platform, using aggregated and anonymised analytics data.
• To respond to support queries and account requests.
• To comply with applicable law and legal obligations.

The legal basis for processing is primarily the performance of a contract with you (providing the OfferSheet AI service), our legitimate interests in improving the service, and your consent where applicable.

4. Data Storage

Your data is stored using Supabase, a database and authentication platform. Our Supabase project is hosted in the European Union (EU). Supabase implements industry-standard security measures including encryption at rest and in transit.

We retain your personal data for as long as your account is active or as needed to provide the service. If you close your account, we will delete or anonymise your data within a reasonable period, unless we are required to retain it by law.

5. Third-Party Processors

We share your data only with trusted third-party service providers (“processors”) who act on our instructions and in accordance with this policy. These include:

• Supabase — database, authentication, and storage. Data is hosted in the EU.
• Resend — transactional email delivery (e.g. account and notification emails). Resend processes your email address to deliver messages on our behalf.
• Stripe — payment processing and subscription management. Stripe is a PCI DSS-compliant payment processor. We do not store your card details; Stripe handles all payment data directly.
• Anthropic— AI processing used to generate extracted offer terms and other AI-assisted features. Relevant offer message text is sent to Anthropic's API to produce output; Anthropic's data handling is governed by their privacy policy and enterprise data-use commitments.
• Google Analytics — website analytics on the marketing site to help us understand how visitors find and use the site. Analytics data is aggregated and anonymised where possible.
• Vercel — hosting and deployment of both the marketing site and the OfferSheet AI application.

We do not sell your personal data to third parties and we do not permit processors to use your data for their own purposes beyond delivering their service to us.

6. Cookies

OfferSheet AI uses cookies and similar technologies for authentication, session management, and analytics. By continuing to use OfferSheet AI you consent to essential cookies required for the service to function. Analytics cookies (Google Analytics) may be set on the marketing site; you can opt out via your browser settings or a cookie-management tool.

7. Your Rights Under UK GDPR

As a data subject under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data where there is no legitimate reason for us to continue processing it.
• Right to data portability — you can request that we provide your data in a structured, commonly used, machine-readable format.
• Right to restrict processing — you can ask us to suspend the processing of your data in certain circumstances.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, please email us at ross@ellner.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include encrypted data storage, HTTPS for all data in transit, and access controls that limit who within Rodor Technologies Ltd can access personal data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page with an updated “last updated” date. For significant changes, we will notify you by email or via a notice in the OfferSheet AI application.

10. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or how Rodor Technologies Ltd handles your personal data, please contact us:

• Email: ross@ellner.co.uk
• Company: Rodor Technologies Ltd, England and Wales