Privacy Policy

Last updated: 27 May 2026

SCORP.IA understands that your privacy is important to you. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who We Are

SCORP.IA ("we", "us", "our") is the operator of the platform at scorpia.legal. SCORP.IA is a trading name of Dimitri Henderson-Stewart, London W106PZ. For all data protection matters, you can contact us at support@scorpia.legal.

2. What Personal Data We Collect

Data	How collected	Purpose
Email address	Account registration	Account management, login, notifications
Password (hashed)	Account registration	Authentication — stored as a one-way hash, never readable
Subscription plan & billing status	Stripe payment processing	Access control, usage limits
Documents you generate	Platform use	Stored in your account for editing and export
Usage data (documents generated this month)	Platform use	Enforcing subscription limits
IP address & browser data	Automatically on site visit	Security, fraud prevention, server logging

We do not collect sensitive personal data, financial card data (handled entirely by Stripe), or data from children under 18.

3. Legal Basis for Processing

We process your personal data on the following bases under UK GDPR:

• Contract performance (Art. 6(1)(b)) — to provide the service you subscribed to
• Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention, and platform improvement
• Legal obligation (Art. 6(1)(c)) — where required by law

4. Third-Party Data Processors

We share limited personal data with the following trusted third parties, solely to deliver our service:

Processor	Purpose	Location
Railway (railway.app)	Platform hosting and database storage	USA (with EU data transfer safeguards)
Stripe	Payment processing and subscription management	USA (Privacy Shield / SCCs)
OpenAI	AI document generation (processes your document inputs)	USA (SCCs)
Resend	Transactional email (verification, notifications)	USA (SCCs)

We do not sell your personal data to any third party. We do not use your data for advertising.

5. How Long We Keep Your Data

• Account data — retained for as long as your account is active, plus 12 months after deletion request
• Generated documents — retained in your account until you delete them or close your account
• Server logs — retained for up to 90 days for security purposes
• Billing records — retained for 7 years as required by financial regulations

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your account and associated data
• Right to restriction — ask us to stop processing your data in certain circumstances
• Right to portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at support@scorpia.legal. We will respond within one month.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies

SCORP.IA uses a single authentication cookie (cai_auth) to keep you logged in. This is a strictly necessary cookie and does not track you across other websites. We do not use analytics cookies, advertising cookies, or third-party tracking.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• All passwords stored as one-way bcrypt hashes
• All connections served over HTTPS/TLS
• Access to production systems restricted and logged
• Database stored on an encrypted volume

9. International Transfers

Our platform is hosted on Railway infrastructure based in the United States. We ensure appropriate safeguards are in place for transfers outside the UK, including Standard Contractual Clauses where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify you by email of any material changes.

11. Contact Us

For any privacy-related queries, subject access requests, or complaints, contact us at support@scorpia.legal.