Privacy Policy
This policy explains what DeliverX stores, why it is used, and the choices you have.
Last updated: 22 October 2026
Who we are
DeliverX is the trading name of the data controller for this service. You can reach us about anything in this policy at gnaneshwer.jadav@gmail.com. A registered company entity is being established; this page will be updated with its details when that completes.
Information we collect
We store account details, profile and organisation information, the work and evidence you create, coaching or attestation activity, consent choices, and subscription status. Payment card details are handled by our payment provider and are not stored by DeliverX.
Why we use it (lawful bases)
We use this information to provide and secure your account and operate the products you select (performing our contract with you), to preserve your evidence record and process subscriptions (contract and legal obligation), to respond to requests and improve reliability (legitimate interest), and — only where you have opted in — for observation features and analytics (consent).
AI processing
When you request an AI-assisted feature, the relevant content is processed to produce that draft or assessment. AI drafts require your action before they are submitted. We do not use your content to train third-party models without your consent.
Attestation and your attester
When you request attestation, we share the specific artefact, its brief and rubric with the person you name, using a secure link. We process their name, email and response to operate the attestation. They see your work — never your scores — and you can withdraw the request at any time.
Sharing and visibility
Records are private by default. We share data with service providers only to run DeliverX — our cloud hosting and database provider, our payment provider (Stripe), our email delivery provider, our AI processing provider, and our web search provider (which receives research queries derived from the business case you enter) — and with coaches, teammates or attesters only where the feature and your choices require it. Public portfolio links are created, limited and revocable by you.
The evidence ledger and deletion
Submitted work is frozen as immutable artefact versions so that what was judged cannot be changed after the fact. If you delete your account, we remove or anonymise the personal information attached to those records; the anonymised artefact versions may be retained to preserve the integrity of the ledger and any credentials issued against them.
Retention and security
We retain account data while your account is active and as needed for security, legal and payment obligations. Access controls and private storage protect records, but no online service can promise absolute security.
Your rights
You can update profile information, keep observation off, revoke shared portfolios and control what you submit. Under UK GDPR you may ask for access, correction, export or deletion of your personal information, object to or restrict processing, and withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
No sale of personal data
We do not sell personal data or use it for third-party advertising.