Privacy Policy | AnyInspect

1. Introduction

Helveton Limited, trading as AnyInspect ("we", "us", "our"), operates the AnyInspect mobile application, web dashboard, and website (collectively, the "Service"). Helveton Limited is a company registered in the State of Delaware, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Service, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

Helveton Limited (trading as AnyInspect) is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Address: 1111B S Governors Ave #99667, Dover, DE 19904, United States

2. Information We Collect

2.1 Information You Provide

Account information: Name, email address, password, organisation name, and professional role when you register for an account.
Profile information: Professional qualifications, certifications, and contact details you add to your profile.
Inspection data: Video and audio recordings of building inspections, photographs, building addresses, inspection observations, notes, and findings.
Payment information: Billing details processed through our payment provider Stripe. We do not store your credit or debit card numbers on our servers.
Communications: Messages, support requests, and feedback you send to us.

2.2 Information Collected Automatically

Device information: Device model, operating system version, unique device identifiers, and app version.
Usage data: Pages visited, features used, session duration, and interaction patterns collected via PostHog analytics.
Network information: IP address, browser type, and connection status (online/offline).
Crash and performance data: Error logs and diagnostic information to help us improve the Service.

2.3 Information from Third Parties

Authentication providers: If you sign in using Google OAuth, we receive your name and email address from Google.

3. How We Use Your Information

We use the information we collect to:

Create, maintain, and secure your account and organisation.
Process and store building inspection recordings, photographs, and associated data.
Provide AI-powered transcription of audio and video recordings using Deepgram.
Provide AI-powered analysis of inspection data to generate draft report content using Google Gemini.
Generate PDF inspection reports.
Process payments and manage subscriptions through Stripe.
Send transactional communications such as inspection updates, report delivery notifications, and account alerts.
Provide customer support and respond to your enquiries.
Analyse usage patterns and improve the Service through analytics.
Detect, prevent, and address technical issues, fraud, and security threats.
Comply with legal obligations.

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following lawful bases:

Performance of a contract: Processing your inspection data, generating reports, and managing your account is necessary to deliver the Service you have subscribed to.
Legitimate interests: Analytics, service improvement, fraud prevention, and ensuring the security of our Service. We have balanced these interests against your rights and determined that our processing does not unduly impact your privacy.
Consent: Marketing communications and optional cookies. You may withdraw consent at any time.
Legal obligation: Retaining financial records and responding to lawful requests from authorities.

5. AI Processing

Our Service uses artificial intelligence to assist with building inspection workflows. It is important that you understand how your data is processed by AI systems:

Audio and video transcription: Recordings you upload are sent to Deepgram, a third-party transcription service, which converts speech to text. This text is then stored within your inspection record.
Inspection analysis: Transcriptions and related inspection data are sent to Google Gemini, a third-party AI service, which analyses the content against relevant inspection schemas to generate draft report items.
Human review required: All AI-generated content is presented as draft material for your review. You must review, verify, and approve or reject all AI-generated findings before finalising any report.
No model training: Your data is not used to train AI models. It is processed solely to deliver results back to you within the Service.

Under UK GDPR Article 22, you have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. Our AI features are designed as assistive tools subject to human oversight, not as autonomous decision-makers.

6. Data Sharing and Third-Party Services

We share your data with the following categories of third-party service providers, solely to deliver and improve the Service:

Deepgram — Audio and video transcription. Receives audio/video data for processing.
Google (Gemini) — AI-powered inspection analysis. Receives transcription text and inspection metadata.
Amazon Web Services (AWS) — Cloud storage for videos, photographs, thumbnails, PDFs, and logos via S3.
Stripe — Payment processing and subscription management. Receives billing information.
PostHog — Product analytics. Receives anonymised usage data and interaction events.
Cloudflare — Content delivery, DDoS protection, and DNS management.

We do not sell your personal data to third parties. We may also disclose your information if required by law, regulation, legal process, or governmental request.

7. International Data Transfers

Some of our third-party service providers are based outside the United Kingdom, primarily in the United States. When your data is transferred internationally, we ensure appropriate safeguards are in place, including:

UK International Data Transfer Agreements (IDTAs) or the UK Addendum to EU Standard Contractual Clauses.
Transferring data to countries that have received an adequacy decision from the UK Secretary of State.
Relying on the service provider's binding corporate rules or other approved transfer mechanisms.

You may request further details about the safeguards we use by contacting us at [email protected].

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

Account data: Retained while your account is active and for 12 months after account deletion, unless you request earlier erasure.
Inspection data: Retained while your account is active. After account deletion, inspection data is retained for 6 years to support regulatory and insurance requirements relating to building inspections, unless you request earlier erasure and no legal obligation prevents it.
Payment records: Retained for 7 years in accordance with tax and accounting regulations.
Analytics data: Retained for 24 months from collection, after which it is automatically deleted.
AI processing data: Intermediate transcription and analysis data is retained only for the duration of processing and is not stored beyond the completion of your inspection record.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit using TLS/HTTPS across all communications.
Encryption of data at rest in our cloud storage (AWS S3) and database.
Encrypted local storage on mobile devices using MMKV for offline data.
Role-based access controls (owner, admin, inspector, client) limiting data access to authorised users within your organisation.
Secure authentication via Better Auth with session management.
Regular review of security practices and infrastructure.

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

10. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification: You may request correction of inaccurate or incomplete personal data.
Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
Right to object: You may object to processing based on legitimate interests, including profiling.
Rights related to automated decision-making: You may request human review of any decision made solely by automated means.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

11. Children's Privacy

Our Service is designed for professional use by building inspectors and property management professionals. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information.

12. Cookies and Tracking Technologies

Our website and web dashboard use cookies and similar technologies for:

Essential cookies: Required for authentication, security, and core functionality.
Analytics cookies: PostHog analytics cookies to understand how you use our Service and to improve it.
Chat widget cookies: Intercom cookies to provide live chat support on our marketing website.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Company: Helveton Limited, trading as AnyInspect
Email: [email protected]
Address: 1111B S Governors Ave #99667, Dover, DE 19904, United States