Privacy policy

AlignedComply ("we", "us") provides a compliance obligation-mapping platform for FCA-authorised firms. [Company legal name, registration number and registered office to be added here once incorporated.] You can contact us about privacy matters at info@alignedcompliance.co.uk.

• Account data: your email address and password, handled by our authentication provider (Supabase) — we never see or store your password in plain text.
• Firm data: firm name, firm type, permissions held, and (if you choose to verify it) your Firm Reference Number and the FCA Register's confirmation of your firm's authorisation status.
• Individual data: the names and roles of Senior Managers, Certified Persons, and other individuals you enter as part of building your obligation map and Responsibilities Map.
• Usage data: the obligations, assessments and submissions you record within the platform. We do not currently use analytics, advertising, or third-party tracking cookies.

We use this data to operate the service you've signed up for: generating your firm's obligation map, tracking Fitness & Propriety assessments and reporting deadlines, and (where you request it) verifying your firm against the FCA Financial Services Register. This is processed on the basis of performing our contract with you, and — for FCA Register verification specifically — our legitimate interest in confirming the accuracy of the compliance information we generate for you.

If you verify a Firm Reference Number, we send only that reference number (or your search term) to the FCA's own Financial Services Register API to retrieve your firm's public regulatory status. This lookup is subject to the FCA's own terms of use. We store the result (firm name, status, and verification date) against your firm profile so you have a record of when it was last confirmed.

Your data is stored in a Postgres database managed by Supabase, our data processor. Access is restricted so that only members of your own firm can see your firm's data — other users of the platform cannot see it.

We do not sell your data, and we do not share it with the FCA or any other regulator. We share data only with the service providers necessary to run the platform (currently Supabase for hosting and authentication, and the FCA's own Register API for the specific lookup described above).

We use your browser's local storage to keep you signed in between visits. We don't use third-party advertising or analytics cookies.

We retain your data for as long as your account is active. You can ask us to delete your account and associated data at any time by contacting info@alignedcompliance.co.uk.

Under UK data protection law, you have the right to access, correct, delete, or export your personal data, and to object to or restrict how we use it. You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we have mishandled your data.

Authentication and password storage are handled by Supabase using industry-standard practices. Access to your firm's data is enforced at the database level so that only authenticated members of your firm can read or write it.

We may update this policy as the platform develops. We'll update the "last updated" date above when we do.

Questions about this policy or your data can be sent to info@alignedcompliance.co.uk. See also our Terms of service and Pilot disclaimer.