Privacy Policy

1. Who we are

Durellem Ltd (trading as ioaibiz) is the data controller for personal data processed through www.ioaibiz.com and ioaibiz.se.

Registered company: Durellem Ltd. Support: hello@ioaibiz.com.

2. What we collect

Account data: email address, phone number, and company name provided during onboarding.

Authentication data: magic-link and OTP session data managed via Supabase Auth.

Payment data: subscription status and Stripe customer identifiers. Card details are processed directly by Stripe; we do not store full card numbers.

Service data: content you submit for ioaibiz Social and related lounge services (e.g. weekly plan preferences and approved posts).

Contact form: name, email, and message when you write to us.

Technical data: server logs, IP address, and browser metadata collected by our hosting provider for security and reliability.

3. Lawful bases (UK GDPR / EU GDPR)

Contract: to provide your membership, authenticate you, and deliver subscribed services.

Legitimate interests: to secure the platform, prevent abuse, and improve the lounge experience.

Legal obligation: where required for tax, accounting, or regulatory purposes.

Consent: where you opt in to optional communications (we do not sell personal data).

4. Sub-processors

We use trusted providers who process data on our instructions:

Stripe — payment processing and subscription billing.

Supabase — authentication and application database hosting.

Vercel — website hosting and edge delivery.

Resend — delivery of contact-form messages to our support inbox.

5. Retention

We retain account and billing records for as long as you remain a member and for a reasonable period thereafter to meet legal and accounting requirements.

Contact-form messages are retained as long as needed to respond and resolve your enquiry.

You may request erasure where we have no overriding legal reason to retain data.

6. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing.

To exercise these rights, email hello@ioaibiz.com. We respond within one month.

You may lodge a complaint with the UK Information Commissioner's Office (ICO) or, if you are in Sweden, the Integritetsskyddsmyndigheten (IMY).

7. International transfers

Our providers may process data in the UK, EEA, or United States under appropriate safeguards (including Standard Contractual Clauses where applicable).

8. Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.