Privacy Policy
Last updated: 19 October 2026
We take your privacy seriously…
1. Who We Are
Dizputed Ltd is the data controller for the personal data described in this notice. Dizputed Ltd is a company registered in England and Wales, company number 16488681, with its registered office at 20 Wenlock Road, London, N1 7GU, England.
We are registered with the Information Commissioner’s Office (ICO) as a data controller. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you are a legal professional or organisation using Dizputed for a client’s matter, you are the controller of the case material you import, and Dizputed Ltd processes it on your behalf and only on your instructions.
2. Data We Collect
Account and Licence Information: your name, email address, organisation, serial number, licence type and purchase records.
Case Content: the messages, emails, documents and attachments you import, and the grades, summaries and reports the Software creates from them. Case content often contains personal data about other people, including former partners and children, and may include special category data such as health information, or allegations of criminal conduct.
Device and Diagnostic Information: your IP address, an approximate location derived from it (city and country), a device identifier, operating system, hardware details, computer name and user name, app version, and error logs.
Mailbox Access: if you connect a Gmail or Outlook account, we use the access you grant only to download the messages you choose to import. We do not store your mailbox password.
Support Correspondence: anything you send us when you contact support.
3. Why We Use Your Data and Our Lawful Basis
To provide the Software and your licence, including processing the case content you import: performance of our contract with you.
To keep the Software secure, diagnose faults and improve it: our legitimate interests in running a reliable and secure service.
To keep tax and accounting records: our legal obligations.
To send you optional updates or marketing, and to collect optional diagnostics where we ask first: your consent, which you can withdraw at any time.
Special category and criminal-offence data in case content is processed only as you direct, to help establish, exercise or defend legal claims (UK GDPR Article 9(2)(f) and the Data Protection Act 2018).
We do not sell your personal data, and we do not use case content to train AI models.
4. Who We Share Data With
Hosting: our servers are provided by netcup GmbH in Germany.
AI Processing: messages are graded and summarised by Dizputed’s own privately hosted AI models in the United Kingdom. Case content is not sent to third-party AI providers.
Email Delivery: Resend sends account and sign-in emails on our behalf.
Location Lookup: ip-api.com receives your IP address to return an approximate location.
App Stores and Mail Providers: Dizputed is sold through the Apple App Store and the Microsoft Store, so Apple or Microsoft handles your purchase and payment. Google and Microsoft are involved when you connect a mailbox. Their own privacy policies apply to what they hold.
Legal Obligations: we may disclose data where the law requires it, or in response to a valid request from a public authority.
5. International Transfers
Case content is processed by our AI models in the UK. Some of the other providers above process data outside the UK. Our hosting in Germany is covered by UK adequacy regulations. Where a country is not covered, we use the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
6. How Long We Keep Data
Account and licence records: while your account is open, then 6 years for tax and legal-claims purposes.
Case content in the web app: until you delete it or close your account. After deletion it is removed from our live systems within 30 days, and from our backups within six months.
Case content in the desktop app: stored encrypted on your own device. We do not keep a copy. It is removed when you delete the case or the app’s data.
Case content processed by our AI models: used only to return a result, and not kept by the models afterwards.
Device and diagnostic information: 12 months.
Support correspondence: 2 years after our last contact with you.
Backups: our servers are backed up every day to an encrypted backup, kept for up to six months. Anything deleted from our live systems leaves the backups when the backups holding it expire.
7. Deleting Your Data
You can delete a case in the Software at any time, which removes its messages, results and reports. To delete your account and the personal data we hold, email support@dizputed.com from the address on your account. We will confirm within one month. We will keep only what the law requires us to keep, such as tax records, and only for the periods in section 6.
8. Your Rights
Under UK GDPR you have the right to access your personal data, to have it corrected, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where we rely on it. You also have the right not to be subject to a decision with legal or similarly significant effects that is based solely on automated processing. Dizputed’s AI output supports your own judgement and does not make such decisions.
To use any of these rights, email support@dizputed.com. We will respond within one month, and there is normally no charge.
9. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
10. Security
Desktop case data is stored in an encrypted database on your device. Data is encrypted in transit, and each organisation’s web data is held in its own separate database with access controls. No transmission over the Internet is completely secure, but we work to protect your data against unauthorised access, alteration, disclosure or destruction.
11. Cookies
Our website does not use advertising or analytics cookies. The web app uses only the storage it needs to keep you signed in.
12. Children
Dizputed is not intended for anyone under 18. Case content may contain information about children, which we handle as described in this notice.
13. AI Tools
AI-generated content can contain errors. Check any AI-generated content before relying on it.
14. Changes to This Notice
We may update this notice. We will post the new version here with a new “last updated” date and, if the change is significant, tell you by email.
15. Contact Us
Email: support@dizputed.com
Address: Dizputed Ltd, 20 Wenlock Road, London, N1 7GU, England
Company number: 16488681