Privacy Policy
Last updated: 4 July 2026
This policy explains what personal data Atif Perwiz Consulting Ltd (trading as Unbottleneck) collects when you use our service, why we collect it, how we use it, who we share it with, and the rights you have over it. We are the "data controller" for personal data collected through Unbottleneck.
Who we are
Atif Perwiz Consulting Ltd is a company registered in England and Wales under company number 16381942. Our registered address is Unit 120064, PO Box 6945, London, W1A 6US, United Kingdom.
If you have any questions about this policy or want to exercise your data rights, contact us through our Support page at /support.
What personal data we collect
Information you give us
- Account details: email address, display name, and password (stored as a one-way hash by our authentication provider).
- Content you enter into the app: analyses, chat messages, action items, notes, and any information you type into the conversational analyser.
- Support messages: your name, email, and the content of tickets you submit through the Support page.
- Billing details you provide to our payment processor when you subscribe (see "Payments" below).
Information we collect automatically
- Basic usage data: pages visited, actions taken (e.g. "created analysis", "sent message"), timestamps.
- Device and connection data: IP address, browser type, operating system, and approximate location derived from IP.
- Cookies and similar technologies strictly necessary to keep you signed in and to run the app. See our Cookie Policy.
How we use your data
We use your personal data to:
- Provide the service — create your account, run analyses, save your improvement plans, deliver notifications.
- Take payments and manage your subscription.
- Respond to Support tickets and communicate service-related information.
- Keep the service secure, prevent abuse, and diagnose technical problems.
- Comply with our legal obligations (e.g. accounting records, responding to lawful requests).
- Improve the service — with aggregated, non-identifying usage patterns.
Legal bases (UK / EU GDPR)
- Contract — to deliver the service you sign up for.
- Legitimate interests — to secure the service, prevent fraud, and improve the product.
- Legal obligation — to keep tax and accounting records.
- Consent — for anything optional that requires it; you can withdraw consent at any time.
AI processing of your content
The conversational analyser sends the text of your messages to a large language model provider through the Lovable AI Gateway in order to generate responses, diagnoses, and action plans. We do not use your content to train third-party models. Please do not paste passwords, payment card numbers, or other secrets into the analyser.
Who we share your data with
We only share your data with service providers who help us run the app. The current providers are:
- Lovable Cloud (hosting, database, authentication, storage, email delivery).
- Lovable AI Gateway (LLM inference for the conversational analyser).
- Stripe (subscription billing and payment processing).
Each provider only receives what it needs to perform its role and is bound by its own data-protection commitments. We do not sell your personal data and we do not share it with advertisers.
Payments
Payment card details are entered directly into Stripe's hosted checkout and are never seen or stored by us. We store only a reference to your subscription (status, plan, renewal dates) so we can manage your access.
International transfers
Some of our providers process data outside the UK/EEA (for example in the United States). Where that happens, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.
How long we keep your data
- Account and content data — while your account is active and for a reasonable period afterwards to handle disputes and backups.
- Billing records — retained for at least 6 years to comply with UK tax law.
- Support tickets — retained while relevant to serve you and improve our support, then deleted or anonymised.
You can delete your account at any time from the Account page; this triggers deletion of your content subject to the retention periods above.
Your rights
Under UK/EU data-protection law you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Ask us to delete data ("right to erasure").
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw any consent you have given.
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
To exercise any of these rights, contact us via the Support page.
Security
We rely on our infrastructure providers' industry-standard controls, including encryption in transit (HTTPS) and at rest for the underlying database. Access to production data is restricted to what is necessary to operate the service. No system is perfectly secure — please use a strong, unique password and enable any security features we make available.
Children
Unbottleneck is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Changes to this policy
If we make material changes we will update the "Last updated" date and, for significant changes, notify you in the app or by email. Continued use of the service after changes take effect means you accept the updated policy.
Contact
To contact us about privacy or any other matter, please use our Support page at /support. Written correspondence can be addressed to Atif Perwiz Consulting Ltd, Unit 120064, PO Box 6945, London, W1A 6US, United Kingdom.