Calibration Portal
Privacy
Effective 27 October 2026.
Yolleg Ltd · Company 10455920 · Registered office: 71–75 Shelton Street, London, England WC2H 9JQ, United Kingdom · [email protected].
Data and purposes
We process account email, essential session identifiers, matching-email one-use sign-in challenges, business settings, operational records, review snapshots, authorised staff roles/invitations, consent, support and billing references. Use business references where possible. Do not store payment-card data, identity documents, health records or account passwords. Customer contact details, commercial records and uploaded originals may be sensitive. Processing supports the requested service, security and legal accounting obligations.
Storage and protection
Account email/key fields, business payloads, uploaded PDF bytes and filenames where supported are encrypted at rest. HTTPS protects transfer. This is not end-to-end encryption: authorised support can decrypt records. Necessary HttpOnly/SameSite session cookies last up to seven days; matching-email sign-in links expire after 15 minutes. Contract, declaration, outbox and security records may include contact information outside the encrypted business payload. No advertising trackers, analytics SDKs, third-party fonts, satellite or map-tile providers, or cloud AI processing of workspace records.
Providers and retention
Stripe provides hosted payments; we do not store full card details. SendGrid handles sign-in and transactional emails. The established Labs host stores records and logs; backup geography and exact backup-deletion schedule remain unconfirmed. Providers may process internationally under contractual safeguards. Records persist until erased/account deletion, subject to service availability and capacity; maintain your independent required archive. Billing/contract records may remain up to six years for accounting/disputes. Expired sign-in challenges and matching outbox entries are cleaned up. Removed staff immediately lose service access, but previously exported copies cannot be remotely recalled.
Your choices
Export records, download original PDFs where supported, revoke device sessions, manage staff access, erase the workspace, cancel renewal, or request account deletion, access, correction, restriction, objection or portability at [email protected]. Erasure and billing cancellation are separate. No data sales. You may complain to the UK ICO or local supervisory authority. Protect email and sign-in links. External source links use their own privacy policies.