IR35.fyi

Privacy Policy

Last updated: 5 June 2026

1. Who we are

IR35.fyi is operated by Reesync AI Ltd, a company registered in England and Wales (Company No. 16637155) with its registered office at 124 City Road, London EC1V 2NX.

Reesync AI Ltd is the data controller for personal data processed through this website. If you have questions about how we handle your data, you can contact us at privacy@ir35.fyi.

2. What data we collect

2.1 Assessment data

When you complete an IR35 assessment, you provide information about your contracting engagement: client size, day rate, working arrangements, and the factual circumstances relevant to IR35 status. This information is submitted to our server to generate your assessment result.

Assessment results are stored in your browser's local storage using a randomly generated ID. We do not currently retain assessment data on our servers after the result is returned to your browser, unless you create an account and explicitly save your assessment (a feature available to registered users).

2.2 Account data

If you create an account, we collect your email address and any profile information you provide. Account data is stored securely in AWS infrastructure located in the EU (eu-west-2, London).

2.3 Usage and analytics

We may collect anonymised usage data - such as which pages are visited and how the assessment tool is used - to improve the service. This data does not identify individual users. Where we use third-party analytics, we will update this policy to identify the provider and the data collected.

2.4 Payment data

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store card details. Stripe's privacy policy governs the processing of your payment information. We receive confirmation of successful payments and store your Stripe customer ID in association with your account.

3. How we use your data

We use the data we collect to:

  • Provide and improve the IR35 assessment service
  • Process your assessment through our AI provider (Anthropic) and return results
  • Create and manage user accounts
  • Process subscription payments through Stripe
  • Comply with our legal obligations
  • Respond to enquiries or support requests

We do not sell your data to third parties and do not use it for advertising purposes.

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

  • Contract performance: to provide the assessment service you have requested
  • Legitimate interests: to analyse and improve our service through anonymised usage data
  • Legal obligation: where processing is required by law (for example, to retain records of financial transactions)

5. Third-party processors

We share data with the following categories of processor to deliver our service:

  • Anthropic PBC- processes assessment input data to generate the AI-powered IR35 assessment result. Anthropic processes data in the US but operates under appropriate data transfer mechanisms. Data submitted to Anthropic for assessment generation is not used to train Anthropic's models by default.
  • Amazon Web Services (AWS) - provides hosting infrastructure in eu-west-2 (London). Account data, saved assessments, and uploaded contracts are stored within the EU.
  • Stripe - processes payment card data. Stripe is PCI DSS Level 1 certified.

6. Data retention

Assessment data stored in your browser's local storage persists until you clear your browser data or it expires. We do not control this retention.

For registered users, saved assessments are retained for as long as your account is active and for a period of two years following account closure, unless you request earlier deletion.

Financial transaction records are retained for seven years to comply with HMRC requirements.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: to request a copy of the data we hold about you
  • Right to rectification: to ask us to correct inaccurate data
  • Right to erasure: to request deletion of your data where we have no legal basis for retention
  • Right to restriction: to ask us to limit processing in certain circumstances
  • Right to data portability: to receive your data in a portable format
  • Right to object: to object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@ir35.fyi. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

This website uses cookies only for essential functionality - such as session management for authenticated users. We do not currently use advertising or tracking cookies. If we introduce non-essential cookies in future, we will update this policy and seek your consent where required.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “last updated” date at the top of this page. For material changes, we will notify registered users by email. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

10. Contact

Reesync AI Ltd
124 City Road
London EC1V 2NX
Company No. 16637155

Email: privacy@ir35.fyi