Company status: Not currently operating as a limited company
Company number: Not applicable during the current unincorporated testing phase
VAT: Not VAT registered
Personal data we may collect
We may collect and process:
account details, such as name, email address, company name and authentication details;
workspace data entered into the app, including clients, invoices, applications, variations, debt notes, cashflow information and related commercial records;
notes, comments, actions and other information users choose to enter into the product;
uploaded or imported records if spreadsheet, CSV, PDF invoice extraction or import features are used;
support, feedback and contact messages sent by email or through the website;
technical, security and usage information such as device, browser, session, error and access logs;
AI prompts, questions, workspace context needed to answer user questions and generated outputs if AI features are used;
billing, subscription, invoice, payment method and customer details needed to process paid subscriptions through Stripe.
Why we use personal data
We use personal data to:
create, verify and manage user accounts;
provide the OwePath service and app features;
store, display and process workspace records entered by users;
operate, test, debug and improve the product;
maintain security, prevent misuse and investigate errors;
respond to support, privacy, deletion, export and feedback requests;
process payments, manage subscriptions, provide billing records and handle cancellations through Stripe;
comply with legal, regulatory, tax, accounting or security obligations where applicable.
Lawful basis
Depending on the situation, we rely on:
Contract or pre-contract steps to provide access and respond to requests.
Legitimate interests to run, secure, test and improve OwePath, provided those interests are not overridden by user rights.
Legal obligation where we need to retain or disclose information to comply with law.
Consent where required, for example if optional marketing or non-essential cookies are added later.
Who we share data with
We use third-party providers to operate the product. These may include:
Supabase for authentication, database and user account services;
Vercel for hosting, deployment and technical infrastructure;
GitHub for source code, deployment workflows and project management;
Google Workspace or another email provider for support, contact and privacy communications;
OpenAI or other AI providers to provide AI features, AI-assisted review and extraction support;
Stripe to process payments, manage subscriptions, provide the billing portal, invoices/payment records, cancellations and fraud prevention;
professional advisers, insurers, regulators or authorities where required for legal, tax, security or regulatory reasons.
AI features
If you use AI features, prompts, workspace context needed to answer user questions and generated outputs may be processed to provide the requested feature. If you use PDF invoice extraction, uploaded PDFs and extracted invoice values may be processed to extract and review invoice data. AI outputs and extracted values are for general workflow support only and are not legal, financial, accounting, tax, contractual, NEC, quantity surveying or other professional advice. Users should not enter highly sensitive or confidential information into AI features, prompts or uploads unless they are comfortable using the service.
International transfers
Some providers may process data outside the United Kingdom. Where this happens, we expect providers to use appropriate safeguards such as recognised contractual protections or equivalent mechanisms.
Retention and workspace data
Account and workspace data may be retained while your account is active and for a reasonable period afterwards for security, support, legal, billing, testing and improvement purposes. Because OwePath is new, the product may change over time. Users should avoid entering highly sensitive or confidential data unless they are comfortable using the product.
Your rights
Depending on the circumstances, you may have rights to access, correct, delete, restrict or object to the use of your personal data, and to request a copy of your data. To make a request, email hello@owepath.com. We aim to respond to privacy requests within 30 days.
ICO and complaints
You can contact us first if you have a concern about how your data is handled. You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your personal data is used. Before inviting wider users, the ICO data protection fee position should be checked and paid if required.
