1. Who We Are

Pearstop Ltd. is a technology company registered in Ireland, specializing in AI-driven financial research, ledger data analysis, and due diligence tools. Pearstop Ltd. is the data controller responsible for your personal information under this Privacy Policy.

If you have any questions about how we handle your data, you can contact us at: privacy@pearstop.com

2. What Data We Collect

We may collect and process the following categories of personal data:

• Account & contact data — name, business email address, company name, job title, and phone number provided when registering or contacting us.
• Usage data — pages visited, features used, session duration, and interaction logs collected automatically when you use our platform.
• Technical data — IP address, browser type, operating system, and device identifiers collected via cookies and server logs.
• Communications data — records of correspondence when you contact us by email, form, or other channels.
• Billing data — payment method details and transaction records processed by our third-party payment providers (we do not store full card details).

We do not collect or retain any data that users upload for processing through our AI tools. Uploaded data is processed in-session and immediately discarded — see Section 5 for details.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, maintain, and improve our products and services.
• To manage your account, subscriptions, and billing.
• To respond to support requests and communications.
• To send service-related notifications (e.g. security alerts, product updates).
• To send marketing communications where you have given consent or we have a legitimate interest to do so.
• To comply with legal and regulatory obligations.
• To detect and prevent fraud, abuse, or security incidents.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases under the GDPR:

• Contract — processing necessary to fulfil our agreement with you (e.g. providing access to the platform, managing billing).
• Legitimate interests — processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and direct marketing to existing customers, provided those interests are not overridden by your rights.
• Consent — where you have explicitly opted in, such as subscribing to marketing emails. You may withdraw consent at any time.
• Legal obligation — processing required to comply with applicable laws and regulations.

5. No Retention of Uploaded Data

Pearstop does not store, retain, or have access to any data you upload to our platform for AI processing. All uploaded content is processed in real-time within the active session and is permanently discarded once the session ends. We do not use uploaded data to train AI models or share it with any third party. You are responsible for maintaining your own copies of any data you submit.

6. Cookies

We use cookies and similar tracking technologies on our website to:

• Ensure the website functions correctly (strictly necessary cookies).
• Analyse website traffic and user behaviour (analytics cookies).
• Support marketing and retargeting campaigns (marketing cookies).

You can manage your cookie preferences at any time via your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect your ability to use the platform.

7. How We Share Your Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

• Service providers — cloud infrastructure, payment processors, analytics tools, and CRM platforms that process data on our behalf under data processing agreements.
• Marketing partners — including Prospect Global Ltd (trading as Sopro, Reg. UK Co. 09648733, ICO Reg: ZA346877) for digital outreach. Their privacy policy is available at sopro.io; their DPO can be reached at dpo@sopro.io.
• Legal & regulatory authorities — where required by law, court order, or to protect the rights and safety of Pearstop or others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

All third-party processors are contractually required to handle your data in accordance with GDPR and applicable data protection law.

8. International Data Transfers

Pearstop is based in Ireland and primarily processes data within the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Account data is retained for the duration of your subscription and for up to 2 years after account closure for legal and administrative purposes.
• Billing records are retained for 7 years in accordance with Irish tax and accounting law.
• Marketing data is retained until you unsubscribe or request deletion.
• Uploaded processing data is not retained beyond the active session (see Section 5).

10. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Right to restrict processing — to request that we limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@pearstop.com. We will respond within 30 days. You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure; we encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your account.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page indicates when the policy was last revised. We will notify you of material changes by email or via a notice on our platform. Continued use of our services after the effective date constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

Pearstop Ltd.
Email: privacy@pearstop.com
Registered in Ireland