Privacy Policy

1. Who we are

Ore is a service operated by 2020 Creations Limited t/a Ore, a company registered in England & Wales (Company No. 12775334). We are registered with the UK Information Commissioner's Office (ICO Registration Number ZA801436) and act as the data controller for any personal data you provide.

For any privacy questions, email hello@ore.fund.

2. What we collect

• Scan answers - the information you enter in the scan flow (business description, sector, stage, region, team size, R&D status).
• Onboarding inputs - any website URL or document you choose to upload so we can pre-fill your profile.
• Email address - captured before we show your results so we can send your matches and follow up.
• Payment information - if you purchase a paid feature, Stripe handles your card details on our behalf. We never see or store your full card number.
• Usage data - basic technical information (IP address, browser, pages viewed) collected to operate and improve the service.

3. How we use it

• To match you to relevant UK funding schemes and show your results.
• To process payments and provide any paid features you purchase.
• To email you about your scan, new matching schemes, and product updates.
• To monitor, secure, and improve the service.
• To meet our legal and accounting obligations.

Our legal bases are: (a) your consent, where you submit your email and scan answers; (b) performance of a contract, for paid features; and (c) legitimate interests in operating and improving Ore.

4. AI processing

When you upload a document or paste a URL, we send the extracted text to large language model providers (including Anthropic and the Lovable AI Gateway) so we can summarise it into your profile. We do not allow these providers to train their models on your data. Inputs are processed transiently and are not retained by the model provider beyond what's required to return a response.

5. Who we share data with

We only share data with the suppliers we rely on to run Ore:

• Supabase - database and backend hosting.
• Cloudflare - application hosting and delivery.
• Stripe - payment processing.
• Anthropic / Lovable AI Gateway - AI processing of your inputs.
• Email delivery providers - to send you your results and updates.

We never sell your data. We will disclose data if required by law.

6. International transfers

Some of our suppliers process data outside the UK and EEA. Where this happens, we rely on the UK International Data Transfer Agreement, Standard Contractual Clauses, or equivalent safeguards.

7. How long we keep data

We retain scan and lead data for up to 24 months from your last interaction so we can flag new schemes that match your profile. Payment records are kept for 7 years to meet UK accounting rules. You can ask us to delete your data at any time.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any of these, email hello@ore.fund. You can also complain to the ICO at ico.org.uk.

9. Cookies

We use a small number of strictly necessary cookies and local storage entries to keep your session, remember your scan progress, and process payments. We do not use advertising cookies.

10. Changes

We'll update this policy when our practices change. Material updates will be flagged on this page with a new "Last updated" date.