Skip to content
← Back to Attestamo

Privacy policy

Last updated August 2026 · Attestamo is a product of Haijahr Limited

This policy explains how Haijahr Limited ("we", "us"), the operator of Attestamo, collects and uses your personal data, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). Haijahr Limited is the data controller for the personal data described here.

What we collect

  • Account data: your name, email address and a securely hashed password.
  • Organisation profile: the control statements and evidence details you record about your fraud-prevention procedures.
  • Questionnaire content: the questionnaires you paste in, and the responses generated from your profile.
  • Enquiry data: the name, email, company and message you submit through our request-access form.
  • Technical data: a session cookie to keep you signed in, and standard server logs for security.

How we use it, and our lawful basis

  • To provide and operate the service for you (performance of a contract, and our legitimate interest in running Attestamo).
  • To respond to your access request or enquiry (your consent, which you may withdraw at any time).
  • To keep the service secure and prevent misuse (our legitimate interests).

AI processing and sub-processors

To extract questions and draft responses, the text you submit is processed by a third-party AI inference provider on our behalf, under a data-processing agreement. We also use a hosting provider to run the service. These sub-processors may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement. We do not use your content to train third-party models.

How long we keep it

We keep your account and organisation data for as long as your account is active. When you delete your account, we delete your organisation, its control profile, evidence, questionnaires and responses. Enquiry data is kept only as long as needed to deal with your request.

Your rights

You have the right to access, correct, erase, restrict or object to our processing of your personal data, and to data portability. You can download your data or delete your account and all its data at any time from your account settings. To exercise any other right, email us. You also have the right to complain to the Information Commissioner's Office (ICO).

Contact

Haijahr Limited. Email hello@haijahr.com for any privacy matter or to exercise your rights.