Privacy Notice

Last updated: May 20, 2026

1. Who we are

BeaconPro is operated by Jacob Thomson, a sole trader trading as BeaconPro ("we", "us"). We are the data controller for the personal data described in this notice. You can reach us via the in-app support form.

2. Personal data we collect

We collect:

Account data: name, email address, password hash, and authentication identifiers.
Agency profile data: agency name, logo, brand colour.
Client data you submit: business names, websites, locations, industry, and free-text context you enter to generate reports.
Generated content: the audit reports we produce on your behalf.
Support messages: the content of any messages you send us.
Usage and telemetry: pages visited, features used, errors, approximate timestamps.
Device and connection data: IP address, browser, operating system, device identifiers.
Billing identifiers: the Paddle customer and subscription IDs that link your account to your subscription. Card details and billing addresses are collected and stored by Paddle, not by us.

3. How we use your data and our legal basis

To create and operate your account and provide the audit-report features — performance of our contract with you.
To generate reports based on the client data you submit — performance of our contract with you.
To prevent fraud, abuse and security incidents — our legitimate interest in protecting the Service and other users.
To improve the product through aggregated usage analysis and bug investigation — our legitimate interest in improving the Service.
To provide customer support — performance of our contract and our legitimate interest in serving customers.
To comply with legal obligations such as tax, accounting, and lawful requests — legal obligation.
To send transactional messages (account, billing, security) — performance of our contract.
To send product or marketing emails, where permitted — your consent, which you can withdraw at any time.

4. Who we share data with

We share personal data only with the following categories of recipient:

Service providers (subprocessors): hosting and database infrastructure, authentication, file storage, email delivery, error monitoring, and AI model providers used to generate report content.
Paddle.com Market Limited, our Merchant of Record. Paddle handles the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and refunds.
Professional advisers such as accountants and lawyers, where necessary.
Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Your data may be processed in countries outside the UK and EEA, including the United States, where our infrastructure and AI providers operate. Where we transfer personal data internationally we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

6. Retention

We keep account and report data for as long as your account is active. If you delete your account or stop using the Service, we delete or anonymise personal data within a reasonable period unless we need to keep it longer to comply with legal, tax, or accounting obligations or to defend legal claims. Billing records held by Paddle are retained per Paddle's own policy.

7. Your rights

Depending on where you live, you may have the right to: access your personal data, have it corrected or deleted, restrict or object to processing, request portability, and withdraw consent at any time (without affecting prior processing). If you are in the UK or EEA you also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us via the in-app support form. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege service credentials, and continuous security updates of our hosting platform. No system is perfectly secure; please use a strong unique password and notify us of any suspected account compromise.

9. Cookies

BeaconPro uses cookies and similar storage that are strictly necessary to operate the Service — for example to keep you signed in. We do not currently set advertising or third-party tracking cookies. If we add analytics or marketing cookies in the future, we will request your consent and give you a way to manage your preferences before they are set.

10. Changes

We may update this notice from time to time. If we make material changes we will notify you in the app or by email before the change takes effect.