Privacy Policy

Name: JOHNLEEGROUP LIMITED (trading as John Lee Group), registered in England and Wales, company number 08350293.

Address: 167-169, Great Portland Street, 5th Floor, London, W1W 5PF.

Phone Number: +44 (0) 2032899268

E-mail: support@johnleegroup.com

Most of the personal information we process is provided to us directly by you.

Under the UK General Data Protection Regulation (UK GDPR), we can only use your personal information if we have a proper reason (a lawful basis) for doing so. The bases we rely on are set out below.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

We may collect and use the following personal information about you:

• •your name and contact information, including email address and telephone number
• •your billing information including your postal address, transaction and payment card information
• •your personal or professional interests
• •Any other personal information you provide to us

When you use John Lee AI specifically, we also process:

• •your account details (name, email address, and your Google profile if you sign in with Google)
• •the messages you send to the assistants and the answers they give; on Full Access (and for staff) these are saved as your conversation history, while free-plan chats are not saved to a history
• •your voice, while you are in a voice conversation (Full Access and staff only)
• •your plan, subscription status and daily message counts
• •technical information such as error reports when something goes wrong

This personal information is required to provide services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing services to you.

We collect most of this personal information directly from you—in person, by telephone, text or email and/or via our website.

To run John Lee AI we use the following service providers, who process personal information on our behalf:

• •Clerk — account sign-up, sign-in and authentication
• •Stripe — payments and subscription billing
• •Supabase — database for your account, plan, message counts and conversation history
• •Chatbase — processes the messages you send to generate the assistants’ answers
• •Anthropic — AI model provider used by Chatbase to generate the assistants’ replies; when image attachments are enabled, also processes attached images directly to create visual descriptions
• •ElevenLabs — processes your voice audio to run voice conversations
• •Vercel — hosting for the website and app
• •Sentry — error monitoring (technical error reports)
• •Resend — sending transactional emails (for example, account and billing messages)
• •Cloudflare — bot protection on sign-up and sign-in (via Clerk)

Some of these providers are based in, or process data in, the United States. Those transfers are protected by UK-approved safeguards: the UK Extension to the EU-US Data Privacy Framework, or the ICO's International Data Transfer Addendum.

We do not sell your personal information.

Documents and spreadsheets are read in your browser and their extracted text is sent with your message. When image attachments are enabled, attaching a PNG or JPEG sends the image to Anthropic for visual analysis. The generated description is used in your chat and may be saved with your conversation history. The app does not retain the original image file; provider retention still applies.

Projects save extracted document text, image descriptions, project notes and linked chats so you can use them in later conversations. You can view, export or forget saved documents. Deleting a project forgets its documents and keeps its chats as ordinary chats. For large-document searches, limited question and conversation context may also be sent to Anthropic to improve search terms.

Under the UK GDPR, the lawful bases we rely on are:

• •Contract — to provide the service: create your account, answer your messages, run voice conversations, save your conversation history and bill your subscription.
• •Legitimate interests — to keep the service secure, prevent fraud and abuse, monitor and fix errors, and improve the service.
• •Legal obligation — to keep tax and accounting records of your payments.

Your conversation history is kept until you delete it or close your account. When you close your account, we delete your conversation history within 30 days.

When you delete a conversation in the app, we delete our stored copy of it. Copies of your messages, attached images and voice audio processed by Chatbase, Anthropic and ElevenLabs are kept under those providers' own retention periods; email support@johnleegroup.com to request deletion from our providers too.

Voice audio is processed by ElevenLabs to run the conversation while it happens.

John Lee AI uses only cookies that are strictly necessary for the service to work:

• •Clerk — keeps you signed in (session cookies)
• •Stripe — fraud prevention when you pay at checkout
• •Sentry — diagnosing errors
• •Cloudflare — bot protection on sign-up and sign-in (via Clerk)

We do not use analytics or advertising cookies.

Under data protection law, you have rights including:

• •Your right of access — You have the right to ask us for copies of your personal information.
• •Your right to rectification — You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• •Your right to erase — You have the right to ask us to erase your personal information in certain circumstances.
• •Your right to restriction of processing — You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• •Your right to object to processing — You have the right to object to the processing of your personal information in certain circumstances.
• •Your right to data portability — You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

To have your account and conversation history deleted, or to exercise any of these rights, email support@johnleegroup.com.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at support@johnleegroup.com, +44 (0) 2032899268 and or 167-169, Great Portland Street, 5th Floor, London, W1W 5PF if you wish to make a request.

If you have any concern about our use of your personal information, you can make a complaint to us at support@johnleegroup.com, +44 (0) 2032899268 and or 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113.