Privacy Policy

InquestMind is a product of Imprexels Ltd ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: Imprexels Ltd
Registered in:England & Wales
Product: InquestMind (www.inquestmind.com)

For data protection enquiries, please use the contact form on our website.

2. What Data We Collect

We collect the following categories of personal data depending on how you use InquestMind:

Account and identity data

• Name and email address provided during sign-up or collected from your Microsoft or Google account when you authenticate via Microsoft Entra ID.
• Organisation details including organisation name and the division structure you configure within the platform.

Usage and platform data

• Uploaded files and data sources: documents, spreadsheets, or other files you upload to InquestMind for analysis. These are stored securely and processed only to generate the analysis results you request.
• Insight queries: the questions and prompts you submit when raising an Inquest.
• AI-generated results: analysis output produced from your queries and data sources, stored so you can review them later.
• Scheduled insights: configuration data for recurring analyses you set up, including schedule frequency and enabled/disabled status.

Contact and communication data

• Contact form submissions: your name, email address, and the content of your message when you use our contact form.

Technical and security data

• Technical data: IP address, browser type and version, time zone, and operating system - collected automatically by our hosting infrastructure for security and operational purposes.
• reCAPTCHA data: behavioural and device signals collected by Google reCAPTCHA to verify that contact form submissions are made by a human (see Section 6).

3. How We Use Your Data

• To create and manage your InquestMind account and organisation.
• To process your uploaded files and queries and return AI-generated analysis results.
• To run scheduled insight jobs on your behalf.
• To respond to enquiries submitted via our contact form.
• To protect our platform from spam and automated abuse (via reCAPTCHA).
• To monitor and maintain the security and performance of our infrastructure.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract (Article 6(1)(b)) - processing necessary to provide the InquestMind service to you, including account management, running analyses, and delivering results.
• Legitimate interests (Article 6(1)(f)) - to respond to your enquiries, protect our platform from abuse, and maintain platform security.
• Consent (Article 6(1)(a)) - where you have accepted cookies and the use of Google reCAPTCHA via our cookie notice.

5. Data Retention

• Account and platform data (insights, uploaded files, queries, results) is retained for as long as your account remains active.
• Following account or organisation deletion, your data is securely deleted. Please see our in-app account deletion options or contact us to exercise your right to erasure.
• Contact form data is retained only as long as necessary to respond to and resolve your enquiry, after which it is securely deleted.

6. Third-Party Services

Microsoft Entra ID (authentication)

We use Microsoft Entra ID to handle user authentication, including sign-in via Microsoft or Google accounts. Your authentication data is processed by Microsoft in accordance with their Privacy Statement.

Microsoft Azure (hosting and AI services)

InquestMind is hosted on Microsoft Azure in the West Europe region (Netherlands). Your data - including uploaded files, queries, and analysis results - is stored and processed within this region. Microsoft's data processing is governed by their Privacy Statement.

The AI analysis functionality within InquestMind is powered by Azure AI services. Your queries and uploaded data are processed by these services solely to produce your requested analysis output and are not used to train AI models.

Stripe (payment processing)

Subscription payments are processed by Stripe, Inc. When you complete a checkout, Stripe collects and processes your payment card details, billing name, and billing address directly. We do not store your card details. Stripe's processing is governed by their Privacy Policy.

Google reCAPTCHA

Our contact form uses Google reCAPTCHA v3 to protect against automated spam. reCAPTCHA collects hardware and software information (including device and application data) and sends it to Google for analysis. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

7. International Data Transfers

Our infrastructure is hosted in Azure West Europe (Netherlands), which is within the European Economic Area (EEA). Under UK GDPR, transfers to EEA countries benefit from adequacy regulations, meaning your data is afforded an equivalent level of protection.

8. Cookies

Our website uses the following types of cookies:

• Essential cookies:required for the platform to function, including authentication session tokens and your cookie consent preference stored in your browser's local storage.
• Google reCAPTCHA cookies: set by Google to assess whether contact form interactions are human. These are only active when you interact with the contact form.

We do not use advertising, tracking, or analytics cookies. You can withdraw your cookie consent at any time by clearing your browser's local storage.

9. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure("right to be forgotten") of your personal data.
• Restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Data portability where processing is based on consent or contract.

To exercise any of these rights, please contact us via the contact form on our website. We will respond within one calendar month.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.