Legal

Privacy Policy

Last updated: 27 February 2026

1. Who We Are

Ingesta Ltd ("Ingesta", "we", "us", or "our") operates the Ingesta platform at www.ingesta.co.uk. We are an AI-powered document processing platform specialising in insurance claims extraction and verification. We are committed to protecting and respecting your privacy.

2. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, company name, and role when you create an account or contact us.
  • Documents and data: Documents uploaded to DocuLoad for extraction, emails created via MailCraft, and related files processed through our platform.
  • AI interaction data: Chatbot conversations, workflow configurations, and call center recordings when using our AI features.
  • Usage data: AI transactions used, pages visited, features accessed, session duration, device type, browser, operating system, and approximate location (country/city) derived from your IP address.
  • API usage: API key usage logs, request metadata, and integration activity for organisations using our developer tools.
  • Communications: Messages sent through our support chat, contact forms, or email correspondence.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Ingesta AI Suite including DocuLoad, MailCraft, Ingesta AI Bot, AI Workflows, and AI Call Center.
  • Process documents and extract structured data using AI-powered extraction.
  • Train and improve chatbot responses based on your knowledge base uploads.
  • Execute automated workflows and integrations on your behalf.
  • Authenticate your identity and manage your account, organisation, and team members.
  • Track AI transaction usage for billing purposes across Free, Pay-As-You-Go, Pro, and Enterprise plans.
  • Communicate with you about your account, support requests, and platform updates.
  • Analyse usage patterns to improve performance, security, and user experience.
  • Comply with legal obligations and enforce our terms of service.

4. Data Processing and AI

Data processed through Ingesta AI Suite uses artificial intelligence (powered by OpenAI and other third-party AI providers). This includes:

  • DocuLoad: Documents are analysed and structured data is extracted using AI models.
  • MailCraft: Email templates are generated and converted to HTML using AI assistance.
  • Ingesta AI Bot: Conversations are processed to provide intelligent responses based on your knowledge base.
  • AI Workflows: Automated processes are executed based on your configured triggers and actions.
  • AI Call Center: Voice conversations may be transcribed and analysed for quality and training purposes.

All data is:

  • Encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Processed solely for the purpose of delivering the requested AI service.
  • Not used to train third-party AI models without your explicit consent.
  • Retained according to your organisation's configured retention policy (default 30 days), after which it is permanently deleted.

5. Data Sharing

We do not sell your personal information. We share data only with:

  • AI processing providers (e.g., OpenAI) for document extraction, under strict data processing agreements.
  • Infrastructure providers (e.g., Vercel, Supabase) for hosting, storage, and database services.
  • Payment processors (e.g., Stripe) for billing and subscription management.
  • Law enforcement when required by law or to protect our legal rights.

6. Data Security

We implement industry-standard security measures including:

  • Multi-tenant data isolation with row-level security per organisation.
  • Encrypted storage and transmission of all documents and personal data.
  • Secure API key authentication with SHA-256 hashing.
  • Regular security audits and penetration testing.
  • Role-based access control within organisations.

7. Data Retention

Account data is retained for the lifetime of your account. Documents and extraction data are retained according to your organisation's retention policy. When you delete your account or organisation, all associated data is permanently removed within 30 days.

8. Your Rights

Under applicable data protection legislation (including UK GDPR), you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate personal data.
  • Request deletion of your personal data.
  • Object to or restrict processing of your data.
  • Data portability -- receive your data in a structured format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at joshua@ingesta.co.uk.

9. Cookies and Analytics

We use essential cookies for authentication and session management. We collect anonymous analytics data (page views, device type, country) to improve our platform. We do not use third-party advertising cookies or trackers.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our platform. Continued use of Ingesta after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this privacy policy or our data practices, please contact:

Ingesta Ltd
Email: joshua@ingesta.co.uk
Website: www.ingesta.co.uk