Privacy policy

Who we are

UW AI is operated by Growise Consultants ("we", "us"). This policy explains what we do with personal information when you use the service or this website.

For the personal data your firm uploads about merchants and their owners, your firm is the controller and we act as processor on your instructions. For your own account and billing details, we are the controller.

What we collect

Account data

Name, work email, company, phone, role and permissions for each user you create.

Case data

Bank statements and the figures read from them, merchant and owner details your team enters, notes, decisions and attachments.

Usage data

Audit records of who viewed or changed what, and when, which exist because underwriting needs an accountable trail.

Enquiry data

What you send through the trial or demo form on this site.

Technical data

IP address, browser and device information, and server logs.

How we use it

To run the service

Reading statements, building analyses, researching businesses and producing the packs your team sends.

To keep it secure

Authentication, rate limiting, abuse prevention and the audit log.

To support you

Answering questions and fixing faults, which sometimes means looking at a specific case with your permission.

To bill you

Seat counts and whether the AI add-on is enabled.

AI features and model providers

The AI features send document content and the figures derived from it to third-party model providers so they can be read, analysed or researched. The result returns to your case.

Your content is not used to train those providers' models. We do not sell personal data, and we do not use merchant data to build products for anyone else.

AI features are off by default for every user and must be granted by one of your administrators, so a firm that would rather not send statements to a model provider can simply not enable them.

Who we share it with

Infrastructure providers

Hosting, database and email delivery, acting on our instructions.

Model providers

Only for the AI features described above, and only the content needed to perform them.

Data sources

Company research queries public sources. We send the business name and address you supply; we do not send statement data.

Legal

Where we are required to by law, or to establish or defend a legal claim.

Where it is kept, and for how long

Data is held on managed cloud infrastructure. We keep case data for as long as your account is active and you ask us to keep it. When an account closes we delete or return the data within 90 days unless law requires us to keep it longer.

Enquiries from this website are kept for up to 24 months, so we can tell who contacted us and what was said.

Security

Access is per user and per feature, credentials are hashed, sensitive identity fields are encrypted at rest, and every permission change and case action is written to an audit log. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

Your rights

Depending on where you are, you may have rights to access, correct, delete or port your personal data, and to object to or restrict some processing. Write to support@growiseai.com and we will respond.

Where your firm is the controller — which is the case for merchant data — we will refer a request to your firm rather than act on it ourselves.

Changes

We will update this page when the service changes in a way that affects it, and the date at the top will change with it. Material changes will be told to account administrators directly.