Privacy notice
Who we are
CeCe AI is a renewals and contracts tracking service provided by MYLITTLEVENUE LTD, a company registered in England and Wales (company number 08196433), whose registered office is at Church Farm Valley Road, Hughenden Valley, High Wycombe, Buckinghamshire, HP14 4LB.
MYLITTLEVENUE LTD is the data controller for the personal data described in this notice. If you have any questions about this notice or your data, contact us at cajohnstone@hotmail.co.uk.
What we collect
- Account details: your name and email address.
- Email account connection details: encrypted access tokens or app passwords that let CeCe AI read relevant emails with your permission.
- Details extracted from relevant emails: the provider, category, cost and frequency, dates, notice period, renewal terms, masked policy or account numbers, and the email’s ID and a link to it.
- WhatsApp: your WhatsApp number if you link it, and the messages you send to CeCe AI on WhatsApp.
- Technical logs: basic technical logs needed to run and secure the service.
What we don’t collect
- We don’t store the full content of your emails or attachments.
- We only search for emails likely to relate to contracts, policies, renewals and subscriptions.
- We never send, delete or modify your emails.
How we use your data
We use your data to:
- find and track your renewals;
- show your dashboard;
- send you reminders;
- answer your questions about your tracked items; and
- keep the service secure.
We do not sell your data or use it for advertising.
Lawful basis
- Performance of a contract: we process your data to provide the CeCe AI service you have signed up for.
- Legitimate interests: we process limited data to keep the service secure and to improve it.
Service providers (processors)
We use the following providers to run CeCe AI. They process data on our behalf and only for the purposes below.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and login | UK/EU |
| Vercel | Hosting | UK/EU |
| Anthropic | AI processing of relevant email content to extract renewal details. The content is not stored by CeCe AI beyond the extracted fields. | May be outside the UK (see International transfers) |
| Meta/WhatsApp | WhatsApp messages, if you opt in | May be outside the UK (see International transfers) |
| Resend | Email reminders | May be outside the UK (see International transfers) |
| Microsoft and your email provider | Reading relevant emails with your permission | Depends on your email provider |
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or UK adequacy regulations.
How long we keep your data
- We keep your data while your account is active.
- You can disconnect an email account or delete your account at any time. When you do, we permanently delete the related data from our systems within 30 days.
- WhatsApp message history is kept for no more than 30 days.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use your data;
- object to our processing of your data; and
- receive your data in a portable format (portability).
To exercise any of these rights, email cajohnstone@hotmail.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this notice
We may update this notice as CeCe AI develops, for example when we move beyond the private alpha. When we do, we will change the “Last updated” date above and, where the changes are significant, let you know before they take effect.