01Who we are
Chad (trychad.ai) is operated by ZeroLayer Labs Ltd, a company registered in England and Wales, with its registered office at 69 Wilson St, London EC2A 2BB, United Kingdom.
ZeroLayer Labs Ltd is the “controller” of the personal data described in this policy. Questions about it go to alexander@trychad.ai.
02What we collect
When you use the website: the domain you submit for a free scan and, if you continue, your email address; anything you send us by email.
When you apply to become a partner: your name, work email, agency or business name, website, and what you tell us about your clients.
When you book a walkthrough: your name, email address, company and website, collected through our booking tool.
When you become a customer: account and billing contacts, and the data Chad needs to work for you. That includes messages in the Slack channels you invite him to, and data from tools you connect (for example your website repository, hosting, or analytics account). Chad only sees what you give him access to.
Usage data: how you use the website, collected through Google Analytics and Vercel Analytics (see Cookies below).
03How we use it, and why we're allowed to
- To run your free scan and reply to you, including partner applications. Legitimate interests: you asked us to.
- To provide Chad to customers, including onboarding, support and billing. Performance of our contract with you.
- To understand how the website is used with Google Analytics, so we can improve it. Legitimate interests.
- To keep the service secure and meet legal obligations, such as keeping invoices. Legal obligation and legitimate interests.
Your data tailors your Chad (your voice, your competitors, your preferences). We don't use it to train or improve models for other customers.
04Customer workspace data
For data Chad handles inside a customer's workspace (for example their Slack messages or analytics data), the customer is the controller and we process it on their behalf, under our terms and a data processing agreement, available on request.
06International transfers
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy decisions or approved safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
07How long we keep it
- Enquiries and free scans: up to 24 months after we were last in touch.
- Customer data: for as long as you're a customer, then deleted within 90 days of the end of the service, unless you ask us to export it first.
- Invoices and billing records: six years, as UK tax law requires.
09Your rights
Under UK GDPR you can ask us to access, correct, delete, or restrict use of your personal data, to object to how we use it, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
Email alexander@trychad.ai. We'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
10Security
We use access controls, encryption in transit, and reputable infrastructure providers to protect your data. Chad only gets the access you grant him, and you can revoke it at any time from Slack or the connected tool.
11Children
Chad is a business service and isn't intended for anyone under 18.
12Changes to this policy
If we make material changes we'll update this page and the date at the top, and tell customers directly.
13Contact
ZeroLayer Labs Ltd, 69 Wilson St, London EC2A 2BB, United Kingdom. Email alexander@trychad.ai. Also see our terms.