Privacy Policy

Last updated: 7 April 2026

GRCX is operated by Neil Lowden as a sole proprietorship. This policy explains what data we collect, how we use it, and your rights.

What we collect

When you create an account on app.grcx.dev we collect your name, email address, company name, and a password which is stored in hashed form. We never store your password in plain text.

Server logs

Our servers automatically record your IP address, the pages you visit, and timestamps when you access the service. These logs are used for security, debugging, and to keep the service running reliably.

How we use your data

Your account information is used solely to provide you with access to GRCX and to contact you about the service. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party services

GRCX sends regulatory publication titles and summaries to the Anthropic API (Claude) for compliance analysis. No personal data is included in these API calls — only publicly available regulatory publication content.

The service is hosted on Fly.io with servers in Amsterdam, Netherlands. Your data is stored on infrastructure managed by Fly.io.

We use UptimeRobot to monitor service availability. UptimeRobot makes periodic HTTP requests to our public URL and does not access any user data.

What we do not collect

We do not collect financial data, payment card details, government identifiers, or any personal data beyond what is listed above. We do not use cookies for advertising or tracking. The service uses a session cookie solely for authentication.

Data retention

Your account data is retained for as long as your account is active. If you wish to delete your account and associated data, contact us at neil@grcx.dev and we will process your request promptly.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing neil@grcx.dev. If you are in the EU or UK, you have rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

Changes

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.

Contact

For any questions about this policy, email neil@grcx.dev.