ProDisputeProDisputeHome

Privacy Policy

Last updated: 29 May 2026

Critical Entity Ltd ("we", "us", "our") operates ProDispute, a document generation service that helps users prepare formal dispute correspondence based on publicly available legislation. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

We are the data controller for personal data processed through ProDispute. For privacy enquiries, contact us at legal@prodispute.com.

1. What data we collect

We may collect and process the following categories of personal data:

  • Account data: email address and authentication identifiers when you sign up or log in (via our authentication provider).
  • Dispute and letter content: information you provide in chat about your dispute, party names and postal addresses, documents you upload (e.g. images, PDFs), and generated correspondence.
  • Payment data: billing is handled by Stripe. We receive payment status, plan purchased, and customer email from Stripe. We do not store full card numbers.
  • Usage and technical data: IP address (for security, rate limiting, and generation logs), browser type, and service interaction metadata.
  • Profile data: whether you have used your free letter allowance (free_letter_used).

2. How we use your data

We use your personal data to:

  • Provide the ProDispute service, including assessment chat and letter generation.
  • Manage your account, credits, subscriptions, and free-tier eligibility.
  • Process payments and prevent fraud or abuse (including rate limiting).
  • Improve and secure our platform, and comply with legal obligations.
  • Respond to your requests and support enquiries.

We do not sell your personal data. We do not use your dispute content to train third-party AI models for purposes unrelated to delivering your letter, except as required by our subprocessors to process your request.

3. Legal basis (UK GDPR)

We process personal data under the UK GDPR on the following bases:

  • Contract: to perform our agreement with you when you use ProDispute.
  • Legitimate interests: to secure our service, prevent misuse, and improve reliability (balanced against your rights).
  • Legal obligation: where we must retain records for tax or regulatory purposes.
  • Consent: where applicable for optional communications (you may withdraw consent at any time).

4. Third-party processors

We use trusted providers who process data on our behalf, including:

  • Supabase: database hosting and authentication.
  • Stripe: payment processing.
  • Language processing providers: used to analyse your dispute and prepare your correspondence.
  • Legal source retrieval services: used to verify and cite publicly available law.

These providers are bound by contractual obligations to protect your data. Some processing may involve transfers outside the UK; where this occurs, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

A complete list of our subprocessors is available on request at privacy@prodispute.com.

5. Retention

  • Account and dispute data: retained while your account is active and for up to 12 months after account closure, unless a longer period is required for legal claims or disputes.
  • Generated letters and chat history: retained with your dispute records for the same period so you can access your correspondence.
  • Payment records: retained for up to 7 years for accounting and tax compliance.
  • Security and generation logs: typically retained for up to 90 days.

You may request earlier deletion subject to our legal obligations and legitimate business needs.

6. Your rights

Under UK data protection law, you have the right to:

  • Access a copy of your personal data.
  • Rectify inaccurate data.
  • Request erasure ("right to be forgotten") in certain circumstances.
  • Restrict or object to processing in certain circumstances.
  • Data portability for data you provided, where applicable.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, email legal@prodispute.com. We will respond within one month, subject to extension for complex requests.

7. Security

We implement technical and organisational measures including encryption in transit, access controls, row-level security on user data, and rate limiting. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

8. Children

ProDispute is not intended for users under 18. We do not knowingly collect data from children.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.

10. Contact

Critical Entity Ltd
Email: legal@prodispute.com