Privacy policy

Last updated: 1 November 2026

FeeVerify is a payment-cost investigation platform. This policy explains what data we process, why, and the rights you have. It covers our marketing site and the FeeVerify platform.

1. Who we are

FeeVerify is operated by Think Tangible Ltd, a company registered in England and Wales. For the commercial data you upload to run an investigation, we act as a data processor on your behalf, and you remain the controller. For account and marketing data, we act as the controller. You can reach our team at privacy@feeverify.com.

2. The data we process

Client commercial data

To run an investigation, you upload material such as contracts, addenda, invoices, transaction-level cost data and reconciliation files. We process this strictly to provide the service to you, in a per-tenant environment that is yours alone. We do not sell it, share it between tenants, or use it for any purpose other than your investigation.

Account and contact data

When you create an account or contact us, we process names, work email addresses, role, organisation and the content of your messages, so we can operate your tenancy and respond to you.

Technical and usage data

We log platform activity for audit and security: actions taken, by whom, when, and the outcome. We also collect basic technical data such as IP address and device or browser type to keep the service secure and reliable.

3. Why we process it

• To provide the FeeVerify platform and run the investigations you ask for (performance of our contract with you).
• To keep an audit trail of every action, which is a core feature of the product and a legitimate interest in security and accountability.
• To secure the service, prevent abuse and meet our legal obligations.
• To respond to enquiries and, where you have agreed, to send you relevant updates.

4. We do not train models on your data

Your commercial data is never used to train, fine-tune or improve any machine-learning model, ours or a third party's. Where the platform uses model providers to read documents or reconcile data, it does so under agreements that prohibit training on, or retention of, your content beyond what is needed to return a result.

5. Isolation and residency

Each tenant's data sits in a ringfenced environment. There is no co-mingling and no shared fine-tuning layer between tenants by design. Where you require a specific data-residency region, we agree it with you as part of onboarding.

6. Sub-processors

We use a small set of sub-processors to run the service, including cloud infrastructure and authentication providers, and model providers used to read and reconcile data. Each is bound by a data-processing agreement with confidentiality and security obligations consistent with this policy. We keep an up-to-date list available to customers on request.

7. Retention and deletion

We retain your commercial data only for as long as your tenancy is active or as you instruct. When you delete a tenant, or at the end of your engagement, the associated data is deleted from our systems within the period set out in your agreement. Audit-log metadata may be retained for a limited period where we are required to keep it.

8. Security

We protect data in transit and at rest, apply least-privilege access controls, and log access for review. Material outputs pass through a human gate before release, and confidence is graded against named sources, so nothing reaches a decision-maker without review.

9. International transfers

Where data is transferred outside the region you operate in, we put appropriate safeguards in place, such as standard contractual clauses, and agree the arrangement with you in advance.

10. Your rights

Subject to applicable law, you may request access to, correction or deletion of your personal data, object to or restrict certain processing, and request portability. For commercial data we process on your behalf, we will support you in meeting requests from the people whose data you control. To exercise a right, contact privacy@feeverify.com.

11. Cookies and analytics

The marketing site uses no tracking or advertising cookies. Our hosting provider, Cloudflare, may set a strictly necessary security cookie to protect the site from abuse. To understand how the site is used, we count visits with Cloudflare Web Analytics, which records pages viewed, referring sites and broad device and country information without cookies, without storing your IP address and without following you across other sites. The platform uses a session cookie to keep you signed in.

12. Changes to this policy

We may update this policy as the product evolves. We will post the revised version here with a new date, and notify customers of material changes through the platform or by email.

13. Contact

Questions about this policy or your data: privacy@feeverify.com.