Privacy Policy
Last updated: October 23, 2026
Legal notice
The English version controls. Localized versions are for convenience only; if they differ, English prevails.
These terms are governed by the laws of England and Wales.
Localized version: October 23, 2026 · Leicester, England
1. Who we are
Offera Studio Ltd (company number 17168714, registered in England and Wales, registered office: 1 Onderby Mews, London Road, Oadby, Leicester, LE2 5AU) operates Offera and is the controller of account, billing, website and support data. For customer and conversation data that a workspace stores in Offera or receives through its connected channels, the workspace owner is the controller and we process that data on their behalf.
2. Data we collect
We collect account, workspace, billing, device, AI, session, and system log data to run and secure the service.
3. How we use data
We use data to run the product, stop abuse, support users, handle security checks, and improve the service when analytics is enabled.
4. Legal bases
We process data to perform our contract with you (accounts, the service and billing), to meet legal obligations (such as tax and accounting records), for our legitimate interests (security, abuse prevention, support and improving the service), and with your consent for optional analytics, which you can withdraw at any time.
5. Connected Gmail and Outlook mailboxes
If you connect a Gmail or Outlook mailbox, Offera may read emails from that account, analyse message content with AI, and turn it into customer, request, product, price, due date, quote, and conversation records inside your workspace. Offera may also send emails from the connected mailbox on your behalf. Google and Microsoft mailbox data is not sold, used for advertising, credit decisions, cross-site tracking, or general model training. You can disconnect the mailbox and request export or deletion of stored data.
6. Connected messaging channels
When you connect channels such as WhatsApp QR/Web, Telegram, SMS, or email, Offera processes channel identifiers, message content, delivery status, and related customer context to route requests and send replies. WhatsApp QR/Web connections use browser or device session connectivity rather than the official WhatsApp Cloud API; platform rules, device state, or unusual use may interrupt the connection or restrict the connected account. Use these channels only with accounts you control and customer messaging you are authorised to manage.
7. Sharing and subprocessors
We use trusted providers to deliver the service: hosting and databases (Vercel, Northflank, Aiven, Neon), storage and security (Cloudflare), payments (Stripe), email delivery (Resend), AI processing (Groq, Cloudflare) and error monitoring (Sentry). They process data only on our instructions. We do not sell data.
8. International transfers
Some providers process data outside the UK, for example in the European Union or the United States. Where this happens, we rely on UK adequacy regulations or on safeguards in our providers' data processing agreements, such as the UK International Data Transfer Addendum.
9. Security and retention
We protect data with hardened session cookies, device linkage, review queues and access controls. We keep account and workspace data while your account is active. When you ask us to delete your account or data, we delete or anonymise it, except records we must keep by law: billing and accounting records are kept for 6 years under UK company and tax law.
10. Your rights
You may request access, correction, deletion, export or restriction of your personal data, or object to its processing, subject to applicable law. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concern first.
11. Contact
Privacy requests can be sent to info@offerastudio.com.