Privacy Policy
Last updated: 20 July 2026
This policy explains how Recrtr Ltd collects and uses personal data when you use www.recrtr.com and our services. We are the data controller for your account data. Contact: support@recrtr.com.
1. What we collect
- Account data — name, email address, password (stored hashed by our authentication provider).
- Business data — your company details, branding, website content, uploaded images and documents.
- Formation data — where you form a company through us: names, dates of birth, addresses, nationality and identity-verification details of officers, shareholders and persons with significant control, as required for Companies House filings and anti-money-laundering checks.
- Payment data — handled by Stripe; we store your subscription status and billing history, not your card number.
- Connected accounts — if you connect Google Search Console or Google Analytics, we store the OAuth tokens and the search/analytics data needed to provide the Growth features (see section 5).
- Messages — enquiries sent through your hosted site's contact forms, and WhatsApp messages if you use our WhatsApp features.
- Usage data — log and device information generated when you use the platform.
2. How we use it
- To provide the services — building and hosting your website, registering domains, setting up email, generating branding and marketing content, and submitting Companies House filings (performance of contract).
- To take payment and manage subscriptions (performance of contract).
- To meet legal obligations — company-law filings, anti-money-laundering checks, tax and accounting records (legal obligation).
- To send service emails such as verification, billing and important product notices (legitimate interest / contract). Marketing emails are only sent with your consent and always include an unsubscribe link.
- To secure and improve the platform (legitimate interest).
3. AI processing
We use third-party AI models (Google Gemini, Anthropic Claude and OpenAI) to generate and edit websites, copy, logos and marketing content from the information you provide. The content you submit for generation is sent to these providers to produce the output; we use API terms under which your data is not used to train their models.
4. Who we share data with
We share data with the processors and partners needed to run the service:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Application and website hosting |
| Cloudflare | DNS and domain registration |
| Stripe | Payments and billing |
| SendGrid (Twilio) | Transactional email |
| Migadu | Hosted email mailboxes |
| Twilio | WhatsApp messaging |
| Google, Anthropic, OpenAI | AI content generation; Google also provides the Search Console / Analytics integrations |
| Firecrawl | Importing content from an existing website you ask us to import |
| Companies House | Statutory filings you instruct us to make |
We do not sell personal data. Some providers process data outside the UK; where they do, the transfer is protected by UK adequacy regulations or standard contractual clauses.
5. Google user data
If you connect a Google account, we access Search Console and Analytics data solely to provide the Growth features you request (verifying your site, creating properties, and reporting your own search and traffic performance back to you). Recrtr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google at any time from your Growth settings, which revokes our access.
6. Your website's visitors
For websites we host on your behalf, you are the data controller for your visitors' data (for example contact-form enquiries); we process it on your instructions to deliver it to you.
7. Retention
We keep your data while your account is active. When you close your account we delete or anonymise personal data within 90 days, except data we must keep longer by law — anti-money-laundering and company-formation records (5 years from the end of the relationship) and financial records (6 years).
8. Your rights
Under UK GDPR you can ask us for access to, correction, deletion or a portable copy of your personal data, object to or restrict processing, and withdraw consent where processing is based on consent. Email support@recrtr.com and we will respond within one month. You can also complain to the ICO at ico.org.uk.
9. Cookies
See our Cookie Policy for the cookies the platform uses.
10. Changes
We will post any changes to this policy here and, where the change is material, notify you by email or in the app.