Legal
Privacy Policy
This explains what Fiscari does with personal data. The controller is Glasscubes Ltd, registered in England and Wales, company number 08630188, 96 High Street, Burnham, Buckinghamshire SL1 7JT. Contact us at enquiries@glasscubes.com.
1. What we collect
- Account details — your work email address. We do not use passwords: you sign in with a single-use link sent to that address, and we store the short-lived token behind it only until it is used or expires.
- Your questions — the queries you submit and the answers returned, so you can see your history and so we can support and improve the service.
- Usage — how many answers you have used, and when.
- Invitation data — if you arrived from one of our emails, the link carries a campaign code, your email address and a signature confirming we sent it to you.
- Technical data — IP address, browser and device information, captured in server logs and used for security and abuse prevention.
2. Client information in questions
You do not need to identify a client to ask a technical question, and we ask that you don't. If you do include personal data about someone else in a question, it is processed as part of that question and stored with it, and you are responsible for ensuring that you have a lawful basis to provide it to us. Ask about the facts and the law, not the name on the file.
If you choose to share an answer, the link makes that question and answer accessible to anyone who has it, for as long as the link remains active.
3. Why we process it, and our legal basis
- To provide the service — answering your questions, keeping your history, applying your allowance. Basis: performance of a contract.
- To keep it secure — detecting abuse, and preventing multiple accounts being farmed from one source. Basis: legitimate interests in protecting the service.
- To improve it — understanding which questions Fiscari answers well and which it does not, which may include limited human review for quality and safety purposes. Questions are not used to train the underlying AWS Bedrock models. Basis: legitimate interests in improving what we offer.
- To contact you — about your account, and about Fiscari and related Glasscubes products. Basis: legitimate interests, or consent where required. Every marketing email has a one-click unsubscribe, and unsubscribing does not close your account.
4. Analytics
We use Umami for website analytics. It is cookieless and does not track individuals across sites. We deliberately strip your email address and invitation signature from the page address before it is recorded, so analytics receives the campaign code and nothing that identifies you.
5. Cookies and local storage
We do not use advertising or tracking cookies on fiscari.ai. We store your campaign code in your browser's local storage for up to 30 days so that your invitation still works if you come back later. You can clear it at any time in your browser settings. The Fiscari app itself uses storage necessary to keep you signed in.
6. Who we share it with
We do not sell personal data. We use a small number of processors, under contract and on our instructions:
- Amazon Web Services — hosting, storage, search and email delivery, in the EU (Ireland) region.
- AWS Bedrock — the AI models that generate answers. Your questions are processed within AWS, and are not used to train the underlying models.
- Umami Cloud — website analytics, as described above.
We may also disclose data where the law requires it.
7. Where it is held
Your data is held in the United Kingdom and the European Economic Area. Where any transfer outside the UK or EEA is necessary, we rely on an adequacy decision or on standard contractual clauses.
8. How long we keep it
We keep your account details, question history and usage records for as long as your account is open. When an account is closed we erase or anonymise them within one week, unless the law requires us to keep something for longer.
Server logs containing IP addresses are held separately for 60 days, for security and abuse prevention.
9. Your rights
Under UK data protection law you can ask us for a copy of your data, to correct it, to erase it, to restrict how we use it, or to provide it in a portable form. You can object to processing based on legitimate interests, and you can opt out of marketing at any time. Email enquiries@glasscubes.com and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you came to us first.
10. Changes
We may update this policy. We will change the date at the top, and we will tell you if a change materially affects you.