privacy addendum

Privacy Policy Addendum: Insert-Ready Clauses

Status: DRAFT for Lena's live legal check. Each clause is written to drop into the FINAL Privacy Policy at the place shown. Insert a clause only when its flag is turned on. Update the effective date when you do.

P1. PostHog analytics (FLAG_POSTHOG)

Insert in §3 "Who we share it with", after the Google line:

  • PostHog: product analytics (which pages and features are used), in a project used only for TaxProsRated. PostHog acts as our processor.

Insert in §4 "Cookies, ads and analytics", after the analytics bullet:

  • Product analytics (PostHog). We use PostHog to see how the Site and its features are used. In the EU, EEA, UK and Switzerland, PostHog runs either without cookies or only after you agree in the cookie banner. In cookieless mode it doesn't store anything on your device and doesn't identify you across visits. We don't send PostHog your name, email, questions or uploads. We honour Global Privacy Control.

Insert as a row in the §2 table:

| Product analytics (PostHog): pages viewed, feature clicks, approximate location, device type; no name, email or question text | To improve the Site | Consent (EU/UK when cookies are used) / legitimate interests (cookieless) | Up to 90 days |

P2. Aggregate query insights (FLAG_QUERY_INSIGHTS)

Insert in §2, after the AI assistant row:

| Question insights: counters only, such as the topic matched, page type, whether an answer had a source, and how often no source was found | To decide what to write and fix next | Legitimate interests | Counters kept indefinitely; they contain no personal data |

Insert in §1 "The short version", after the AI assistant bullet:

  • We count which topics people ask about. These are totals only. We don't keep the text of your questions beyond 30 days, and the totals don't identify you.

P3. Encrypted database backups (Cloudflare R2)

Replace the Cloudflare line in §3 with:

  • Cloudflare: content delivery, security, DNS, and storage of encrypted database backups (Cloudflare R2)

Insert in §7 "Security", after the first sentence:

Our database backups are encrypted before they're stored with Cloudflare R2. Backups are kept for up to 90 days and then deleted, so data deleted from our live systems leaves the backups within that time.

© Aurum Transfers Limited · General information, not tax advice