Privacy Policy

1. Who We Are

FluxIQ is a professional platform for Gas Safe registered engineers in the United Kingdom, developed and operated by Tibra Enterprise Ltd (Company Number: 16915407, VAT Number: GB 520 0279 38), registered in England and Wales with registered office at Office 16117, 182–184 High Street North, East Ham, London, England, E6 2JA. For the purposes of UK data protection law, Tibra Enterprise Ltd (trading as FluxIQ) is the data controller for personal data collected through this platform.

Contact: privacy@fluxiq.app

2. Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, Gas Safe registration number, company name, telephone number
• Professional data: Gas Safe registration status, verification documents submitted during onboarding
• Usage data: diagnostic sessions, fault codes entered, AI responses generated, feedback submitted on completed jobs
• Technical data: IP address at registration and login, browser type, device information, session timestamps
• Subscription data: plan type, trial credit usage, subscription status (payment processing handled by our payment processor — we do not store card details)
• Consent records: timestamps and document versions accepted at registration and any subsequent re-acceptance events

3. How We Use Your Data

We process your personal data for the following purposes:

• Contract performance: creating and managing your account, providing AI diagnostic assistance, processing subscriptions
• Legal obligation: verifying Gas Safe registration status, maintaining consent records, responding to regulatory requests
• Legitimate interests: improving the accuracy of AI diagnostic suggestions using anonymised feedback, detecting fraud, maintaining platform security
• Consent: sending marketing or product update emails (you may withdraw consent at any time)

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Article 6(1)(b) — Contract: processing necessary to provide the platform services you have signed up for
• Article 6(1)(c) — Legal obligation: verification of professional credentials and safety-related record-keeping
• Article 6(1)(f) — Legitimate interests: platform security, fraud prevention, and AI model improvement using aggregated anonymised data
• Article 6(1)(a) — Consent: marketing communications and optional analytics cookies

5. Data Sharing

FluxIQ may share limited personal data with trusted service providers that support hosting, authentication, storage, payment processing, email delivery, security monitoring, customer support, and AI-assisted diagnostic processing. These providers may only process data for the purposes of delivering FluxIQ services and are required to protect the data they process.

Diagnostic prompts sent to AI providers do not include personally identifiable information, and inputs are never used to train third-party AI models. Payment card data is handled entirely by our payment processor; FluxIQ does not store card details.

To request further information about FluxIQ's service provider categories or applicable sub-processors, contact privacy@fluxiq.app.

We do not sell personal data. We do not share personal data with third parties for marketing purposes.

6. Data Retention

We retain personal data for the following periods:

• Account data: for the duration of your account plus 2 years after closure
• Diagnostic session data: 3 years from the date of the session
• Consent records: 6 years from the date of acceptance
• Audit log entries: 6 years from creation
• Verification documents: deleted within 30 days of account approval or rejection

7. Your Rights

Under UK GDPR you have the following rights:

• Right of access: request a copy of personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data where there is no lawful basis for continued processing
• Right to restriction: request that we limit processing while a dispute is resolved
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact privacy@fluxiq.app. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies required for authentication and session management. We use optional analytics cookies only with your consent. See our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption at rest and in transit, role-based access controls, per-user security on all database tables, and regular access reviews. No transmission over the internet is 100% secure; you transmit data at your own risk.

10. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place including UK adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms. Some of our service providers are based outside the UK; those transfers are covered by appropriate safeguards under their data processing agreements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notification. Continued use of the platform after notification constitutes acknowledgement of the updated policy.

12. Contact

For privacy-related enquiries: privacy@fluxiq.app