Legal
How FocusAI handles personal data for marketing, demo, and beta onboarding in line with UK data protection requirements.
FocusAI Ltd is the data controller for personal data collected through https://www.focusai.dev and related beta/demo onboarding interactions.
Contact: support@focusai.dev.
If you have a concern we cannot resolve, you may complain to the UK Information Commissioner’s Office (ICO).
We process personal data in accordance with UK GDPR and the Data Protection Act 2018.
Where EEA personal data is in scope, we apply GDPR-aligned protections.
For cookies and similar technologies, we follow PECR principles and use consent where legally required.
Contact and enquiry data: name, work email, company details, and message content when you contact us or book a demo.
Beta onboarding data: work email and optional qualification fields (for example company size, role, and primary goal).
Technical usage data: IP address, browser/device metadata, referral and event-level site interactions used for security, performance, and service analytics.
We do not intentionally collect special category personal data through this site and request that you do not submit it.
Contract: to respond to requests and take pre-contract steps for your organisation.
Legitimate interests: to operate, secure, improve, and monitor the site and pre-sales process.
Legal obligation: where we must retain or disclose information under applicable law.
Consent: where required for non-essential cookies or similar technologies.
Provide and manage demo, trial, and beta onboarding journeys.
Operate, secure, and improve website reliability and user experience.
Communicate service updates, onboarding status, and support responses.
Maintain records needed for compliance, fraud prevention, and contractual governance.
We use selected processors, including: Vercel (hosting/CDN), InstantDB (application/auth data), Google OAuth (identity), Resend (transactional email), Stripe (billing where applicable), and Google Analytics/Tag Manager (analytics where configured).
Each provider processes data under contractual terms and security controls appropriate to their role.
We do not sell personal data.
We configure UK/EU regional processing where supported by provider capabilities and account configuration.
Some processing may still occur outside the UK/EEA depending on provider infrastructure and support operations.
Where transfers occur, we use appropriate safeguards such as the UK IDTA, Addendum, and/or EU Standard Contractual Clauses (SCCs), as applicable.
We keep personal data only as long as needed for the purpose collected, plus any required legal, accounting, dispute, or security retention periods.
Indicative periods: enquiry/demo records (up to 24 months), beta lead records (up to 24 months unless converted or removed earlier), and security logs per operational need.
You may request access, correction, deletion, restriction, objection, and (where applicable) portability of your personal data.
You may withdraw consent where processing relies on consent.
To exercise rights, contact support@focusai.dev. We may need to verify identity before actioning a request.
FocusAI is designed to support regulated organisations with auditable workflows and contractual controls.
Your organisation remains responsible for regulatory classification, records management, approval controls, and lawful use of generated outputs.
A Data Processing Agreement (DPA) is available on request for business customers.
We do not perform solely automated decision-making that produces legal or similarly significant effects on individuals through this site.
We may update this Privacy Notice periodically. The latest version will always be available on this page.
Last updated: 15 February 2026.