Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Mortiqo ("we", "us", "our"), operated by Operlo AI, collects, uses, stores and protects personal data when you use our software at mortiqo.com and the Mortiqo platform (the "Service").

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Data Controller: Operlo AI
Contact: hello@mortiqo.com
Phone: +44 7832 620797

For data protection enquiries, contact us at hello@mortiqo.com with "Data Protection" in the subject line.

2. What Data We Collect

From you (the adviser):

Account details: name, email address, phone number, firm name, FCA reference number
Billing information: processed by our payment provider Dodo Payments (we do not store full card details)
Usage data: how you use the Service, including features accessed and frequency
Technical data: IP address, browser type, device information, log files

From your clients (via fact-finds you share):

Personal details: name, date of birth, address, contact information
Financial information: income, expenditure, employment, assets, debts
Health information (where relevant for protection/medical fact-finds)
Documents uploaded: ID, payslips, bank statements, proof of address
Digital signature data

You (the adviser) are the data controller for your client data. We act as a data processor on your behalf.

3. How We Use Your Data

To provide and improve the Service
To process payments and manage your subscription
To send service-related communications (account updates, security alerts)
To respond to support enquiries
To run AI compliance checks and generate suitability reports on cases you submit
To comply with legal obligations

We do not sell your data or your clients' data. We do not use your client data to train AI models.

4. Legal Basis for Processing

Contract: To provide the Service you've subscribed to
Legitimate interests: To improve and secure the Service
Consent: For optional marketing communications (which you can opt out of at any time)
Legal obligation: Where required by law

5. Who We Share Data With

Google (Gemini AI): for AI processing of fact-finds and documents. Data is processed but not retained for model training.
Supabase: for secure data storage (UK/EU servers)
Dodo Payments: for payment processing
Resend / Gmail (via your integration): for email sending
Make.com: for workflow automation

All processors are bound by data processing agreements and UK GDPR-compliant safeguards.

6. International Transfers

Some processors may be based outside the UK/EU (notably AI service providers). Where data is transferred outside the UK, we use Standard Contractual Clauses or equivalent safeguards approved under UK GDPR.

7. Data Retention

Account data: retained while your subscription is active and for 30 days after cancellation
Client data: retained as long as you keep it in the Service; you can delete at any time
Compliance audit trails: retained for 5 years to meet FCA evidence requirements
Billing records: retained for 7 years to meet HMRC requirements

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion ("right to be forgotten")
Restrict or object to processing
Data portability (export your data)
Withdraw consent at any time
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact hello@mortiqo.com. We respond within 30 days.

9. Security

We use industry-standard security measures including encryption at rest and in transit, secure servers in the UK/EU, regular security audits, and access controls. No system is 100% secure, but we work hard to protect your data.

10. Cookies

See our Cookie Policy for details on the cookies we use.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or in-app notice.

12. Contact Us

Questions about this Privacy Policy?

Email: hello@mortiqo.com
Phone: +44 7832 620797