Your information stays yours.

1. Who we are and what this notice covers

GUIDELENS LTD is the controller of personal information processed through GuideLens. We are registered in England and Wales under company number 16638731, with a registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

This notice covers the GuideLens website, browser extension, application assistance service, mailing list and support communications. Official government, university and other application websites have their own privacy notices and remain responsible for their services.

2. Information we process

Depending on the features you choose, we may process:

• Account information, such as your email address, account identifier and authentication information supplied through Google and Supabase;
• Application information, such as names, contact details, travel and education history, identification numbers and other answers you choose to prepare or check;
• Documents and extracted details from a passport, previous application or other file you deliberately upload;
• Form and page context, including relevant field labels, values and surrounding instructions needed to perform an autofill, explanation or page check you request;
• Your questions and drafts, together with the context needed to answer or refine them;
• Service and security information, such as request timing, error status, approximate network information and technical identifiers needed to operate and protect the service; and
• Communications, including a mailing-list subscription or a message you send to support.
• Purchase information, such as payment status, amount, currency and Stripe transaction reference when paid access is enabled. GuideLens does not receive your full card number.

Please do not provide information that is not needed for the feature you are using.

3. How the browser extension works

The extension requests access to websites so that it can work beside the official form you choose to complete. This broad site access supports forms hosted across different government, university and application domains.

Simply browsing without starting a GuideLens application does not send form content to GuideLens. After you sign in and start an application, GuideLens may analyse relevant fields on the current page to prepare an autofill or form-tip offer. It also sends the relevant context when you select a field, ask a question or check a page. GuideLens fills supported fields from confirmed facts and asks when your decision is needed. Final submission stays with you. The extension uses browser storage for settings, authentication and application progress, and may use browser speech features when you enable narration.

4. Documents, form content and AI processing

Selecting a file stages it on your device. After you separately confirm AI reading, the original file is sent to our service and cloud AI providers to extract the requested details. GuideLens does not deliberately save the original file in its own database or file storage; the provider processes the request under its applicable service terms and retention settings. Extracted details are shown to you for review before they are used.

When you ask for an explanation, draft, autofill match or page check, we send only the content and context reasonably needed to provide that result to our service and the relevant AI provider. Application-form content is not used to train GuideLens models.

AI output can be wrong or incomplete. You remain responsible for reviewing every extracted, suggested or filled answer and for submitting the official application yourself.

5. Why we use information

We process information to provide the feature you requested, authenticate your account, maintain session progress, answer support requests, prevent misuse, diagnose failures and improve the reliability of GuideLens.

Our legal bases under UK data protection law depend on the context. They may include performing our agreement with you, our legitimate interests in operating and securing the service, complying with legal obligations, and consent where the law requires it. You may withdraw consent at any time, although this does not affect processing that has already taken place.

6. Service providers and sharing

We use carefully selected providers to run GuideLens. They process information for us according to their role and contractual terms. These currently include:

• Cloudflare for website delivery, edge functions and security;
• Render for backend hosting;
• Supabase for authentication and mailing-list storage;
• Google, Anthropic and OpenAI for AI-powered extraction, explanations, checking and optional speech features, depending on the feature used;
• Google when you choose Google sign-in; and
• Resend for subscription and service emails; and
• Stripe for secure payment processing when paid access is enabled.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing or sale of the business subject to appropriate safeguards. We do not sell or rent personal information.

7. How long information is kept

• Original uploaded files: processed for the requested extraction and not deliberately saved in GuideLens database or file storage. The relevant AI provider may temporarily retain request data under its configured API terms.
• Session-only application details: kept in browser-session storage; not guaranteed to survive closing the browser. You can clear the session in the extension.
• Current version: confirmed facts and document context use browser-session storage. Cross-session saved cases are not a feature of the current extension.
• Account and security records: kept while your account is active and for a reasonable period afterwards where needed for security, disputes or legal obligations.
• Waitlist and support messages: kept while needed to provide the requested communication and maintain an appropriate business record.

We may retain limited information for longer where law requires it, or preserve it temporarily in protected backups until those backups rotate.

8. Security

We use safeguards designed for the sensitivity of application data, including encrypted transport, authenticated API access, rate limits and bounded uploads. Current session storage does not mean fully local AI or zero-knowledge processing. Local PII detection, OCR and redaction are planned, not current features.

No online service can guarantee absolute security. Keep your device and account secure, review what you upload and contact us promptly if you believe your information has been accessed without permission.

9. International transfers

Our providers may process information in the United Kingdom, European Economic Area, United States and other countries where they operate. Where UK data protection law requires a transfer safeguard, we use an adequacy regulation, approved contractual protections or another lawful mechanism.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of your personal information, receive a portable copy, or withdraw consent. You can clear your current extension session or delete your GuideLens account in Account settings. For another request, email hello@guidelens.ai.

We may need to verify your identity before completing a request. If you are in the UK, you may also complain to the Information Commissioner’s Office, although we would appreciate the opportunity to address your concern first.

11. Children

GuideLens is not designed for children to use independently. If you are not old enough to agree to our terms or provide valid consent where you live, a parent or legal guardian must act with you.

12. Changes to this notice

We may update this notice when our service, providers or legal obligations change. We will change the effective date above and give additional notice inside the product when a material change requires it.

13. Contact us