Privacy Policy

1. Who we are

Profitti is an online service that helps small businesses in the UK and Nigeria work out their monthly profit, break-even point and margins from the figures they enter. The service is operated from the United Kingdom and is the controller of the personal data described in this policy.

If you have any questions about this policy or your data, contact us at hello@profitti.io. A postal address is available on request.

2. What this policy covers

This policy explains what personal data Profitti collects, how we use it, who we share it with and the rights you have. It applies to profitti.io and the Profitti web app. It does not cover other websites we link to, which have their own policies.

3. The data we collect

We collect the following when you use Profitti:

• Account data: your name, email address and password. The password is stored only as a secure hash, never as plain text.
• Business profile: your business name, type, location and team size.
• Financial data: the revenue, cost and analysis figures you enter.
• Usage data: how you use the app, such as pages visited and features used.
• Device data: technical information such as your browser type and an approximate location from your IP address.
• Support and feedback: messages you send us and feedback you choose to submit.

4. How we use your data, and our legal basis

We only use your data to run and improve the service:

• To provide the service: create your account, run your analyses and keep your history. Legal basis: performance of our contract with you.
• To keep the service secure and reliable: prevent fraud and abuse, fix errors and monitor uptime. Legal basis: our legitimate interest in a secure, working service.
• To contact you about the service: account emails, password resets and, if you opt in, weekly or monthly reminders. Legal basis: performance of our contract, and your consent for optional reminders.
• To improve the product: understand which features are used, through analytics you can turn off. Legal basis: your consent.
• To meet our legal obligations. Legal basis: compliance with the law.

We do not use your financial data for advertising, and we do not sell your data to anyone.

5. Cookies and analytics

Profitti uses essential cookies to keep you signed in. These are required for the service to work and cannot be turned off. With your consent we also use privacy-friendly analytics to see which features are used. You can accept or reject analytics from the cookie banner, and change your choice at any time using the Cookie preferences link in the footer. We do not use advertising or tracking cookies.

6. Who we share your data with

We do not sell your data. We share it only where it is needed to run Profitti, and the people we share it with fall into these groups:

• Service providers who operate the service for us, such as our hosting, database, email and analytics providers. They act only on our instructions and handle only the data needed for their part of the service.
• Providers of the optional AI and marketing features, but only when you choose to use those features (see section 7).
• Regulators, law enforcement or courts, where the law requires it, or to establish or defend legal claims.
• Anyone else, where you have given your consent or the law allows it.

Where we use a provider to help monitor errors, we remove financial figures and personal details before anything is sent to it, so your financial data stays within our core hosting and database.

7. AI features

Some optional features use AI to give you suggestions, for example reviewing your costs, drafting messages to chase unpaid invoices, or creating marketing posts. These run only when you choose to start them. When you do, the figures and text you provide are sent to a third-party AI provider and processed to generate your result. Where a marketing post needs an image, we may use an image-generation or stock-photo provider. Your data is not used to train AI models. If you never use these features, none of your data is sent to these providers.

8. Peer benchmarks

Profitti can show how your figures compare with other businesses of a similar type, size and country. To do this we combine figures from many businesses into anonymous averages and ranges. These benchmarks never identify you or any single business. A comparison is only ever shown once enough businesses are in a group (at least 30), and small groups have a little noise added so no single business can be singled out. Legal basis: our legitimate interest in providing useful comparisons. You can opt out at any time in Settings, which removes your figures from future benchmarks.

9. International data transfers

Some of our providers are based outside the UK, for example in the United States. Where your data is transferred outside the UK, we rely on the safeguards allowed under UK data protection law, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, so your data keeps a similar level of protection.

10. How long we keep your data

We keep your data for as long as your account is active. If you delete your account, we permanently delete your personal and financial data within 30 days, except where we have to keep limited information to meet a legal obligation.

11. Security

Your data is stored in the EU and is encrypted in transit and at rest. We use row-level security so you can only ever access your own data, and we keep financial data inside our core hosting and database. No system is perfectly secure, but we take protecting your data seriously.

12. Your rights

You have the right to:

• access the data we hold about you
• correct data that is wrong or out of date
• delete your account and your data
• ask us to restrict or stop processing your data
• object to processing based on our legitimate interests
• receive a copy of your data in a portable format
• withdraw consent at any time, for example for analytics or reminders

To use any of these, email hello@profitti.io or delete your account from Settings.

13. Complaints

If you are unhappy with how we handle your data, please contact us first at hello@profitti.io so we can put it right. You also have the right to complain to a data protection regulator. In the UK this is the Information Commissioner's Office (ico.org.uk). In Nigeria this is the Nigeria Data Protection Commission (ndpc.gov.ng).

14. Changes to this policy

We may update this policy from time to time. If we make a significant change, we will let you know by email or with a notice in the app before it takes effect.

15. Contact

Questions about this policy or your data: hello@profitti.io.