ClaimBot AI Privacy Policy

Effective Date: 6th March 2026

Introduction

ClaimBot AI, a service operated by Plus Telecom Ltd ("we", "us", or "our"), understands that your privacy is important. We respect and value the privacy of all our users and will only collect and use personal data in ways described in this Privacy Policy, in line with your rights and our legal obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

For the purposes of applicable data protection laws, Plus Telecom Ltd is the "Data Controller" of the personal data you provide to us.

1. Information About Us

ClaimBot AI (a trading style of Plus Telecom Ltd)

Registered Address: St Stephens House, Arthur Road, Windsor, Berkshire, United Kingdom, SL4 1RU

Email: support@claimbot.ai

Telephone Number: (+44) 02046 344 324

2. What This Policy Covers

This Privacy Policy explains how we collect, use, and protect your personal data, including what data we collect, how we use it, your rights regarding your data, and how you can exercise those rights.

3. What Personal Data We Collect

We may collect and process the following data:

• Name
• Address
• Email address
• Telephone number
• Email data limited to information necessary to identify flight bookings and related details (such as flight date, time, booking reference, and airline) in order to detect potential compensation claims.
• Google Account permissions (read functionality via Gmail, if used)
• Special Category Data: We do not intentionally collect or process special category personal data. However, flight booking confirmations may occasionally contain such information (for example assistance requests or dietary preferences). Where such information is incidentally processed, it is not used for any purpose by ClaimBot AI and is not retained beyond what is necessary to extract relevant flight booking details.

4. Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

• Your Consent: For accessing your Gmail and introducing you to our partner solicitors.
• Legitimate Interests: Our legitimate interests include operating and improving the ClaimBot AI service, detecting potential flight compensation opportunities for users, and preventing fraud. We ensure these interests do not override your data protection rights.
• Compliance with a legal obligation

5. How We Use Your Data & Our "Ongoing Service"

ClaimBot AI operates as an ongoing claims eligibility service. We do not just process a single claim; our platform actively monitors for your legal entitlements over time. We use your data for:

• Providing and managing your account
• Scanning your inbox to identify past and future flight delay compensation opportunities. This monitoring only analyses email metadata and booking information required to identify flights and does not involve reading unrelated personal correspondence. Automated systems are designed to ignore and not analyse unrelated email content.
• Service Communications: By registering for ClaimBot AI, you consent to us contacting you (via email, SMS, or phone) when we identify a potential claim or need to communicate regarding your account. These are solicited service messages relating to your ongoing account with us, not "cold calls."
• Analysing usage patterns and improving the reliability and accuracy of the ClaimBot AI service.

ClaimBot AI does not make automated legal decisions regarding compensation claims. Any claim eligibility assessment is performed by independent partner law firms.

6. Data Sharing and Partner Law Firms

We act as an independent introducer. To help you secure compensation, we must share your identified flight data with legal professionals.

• Partner Solicitors: If we identify a potential claim and you choose to proceed, we will share your contact and flight details with our specialist panel of independent partner law firms so they can assess and process your case. By choosing to proceed with a claim introduction, you consent to the relevant information being shared with a partner law firm for the purpose of assessing and pursuing the claim.
• Service Providers: We share limited information with third-party subprocessors strictly to operate our application (e.g., Google Cloud, Anthropic).
• We will never sell or rent your data to data brokers or use your Google user data for targeted advertising.

7. Data Retention

Because we provide an ongoing claims eligibility service, we retain your account information and contact details for as long as your account remains active so we can alert you to future claims. Actual emails accessed via the Gmail API are processed automatically and are not permanently stored by us once the relevant flight data has been extracted. You may request deletion of your account and data at any time. After account deletion, personal data may remain in secure backups for a limited period (typically no longer than 90 days) where required for security, fraud prevention, or legal compliance.

8. Subprocessors and Data Processing Agreements

We use the following third-party subprocessors to help deliver our services. Each has entered into a Data Processing Agreement (DPA) with us.

• Google LLC (US): Gmail API for email access, OAuth authentication.
• Anthropic PBC (US): AI-powered parsing of extracted booking information via Claude API.

For international data transfers outside the UK/EEA, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) and adequacy decisions. Only the minimum necessary booking-related text extracted from emails is transmitted for automated analysis.

9. Google API Services User Data Policy Compliance

ClaimBot AI's use and transfer to any other app of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow humans to read your emails unless legally required for security purposes or with your explicit, separate consent. Gmail data is never used for advertising, marketing profiling, sale to data brokers, or training machine learning models. ClaimBot AI only accesses Gmail data after explicit user authorisation through Google’s secure OAuth permission system.

10. Data Storage and Security

All user data is stored on secure servers using industry-standard encryption in transit (HTTPS/TLS) and restricted access controls. Authorized personnel may only access this data in limited circumstances (e.g., resolving technical issues or responding to valid legal requests).

11. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you (Subject Access Request).
• Have inaccurate or incomplete data corrected
• Request deletion of your personal data ("right to be forgotten")
• Restrict or object to our processing of your data
• Withdraw consent at any time. You may revoke email access through your ClaimBot AI account settings or through your Google Account permissions page. To exercise these rights, contact us at: support@claimbot.ai. We will respond within one month.
• You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

If you have questions about how your personal data is processed, please contact: support@claimbot.ai

12. Age Restriction

ClaimBot AI is strictly for users aged 18 and over. We do not knowingly collect data from minors. If we become aware of such data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with a revised effective date. Continued use of the service constitutes your acceptance of the updated policy.