Raq.com Privacy Policy

Effective date: 21 January 2026

This Privacy Policy explains how Vu Ai Ltd (we, us, our) collects and uses personal data when you use Raq.com and related services (the Services).

1. Controller and contact

Data controller: Vu Ai Ltd
Registered office: International House, The Mclaren Building, 46 The Priory Queensway, Birmingham, United Kingdom, B4 7LR
Privacy contact: hello@raq.com

If you have questions or requests, contact us using the details above.

2. Personal data we collect

We may collect the following categories of personal data:

Account and profile data

name, email address, password hash, profile details
organisation and workspace details
roles, permissions, and team membership.

Payment and billing

billing contact details and transaction metadata
payment status and invoices.

Payments are typically processed by third-party payment processors, and we do not store full card details.

Usage and device data

log data (IP address, browser type, timestamps, pages viewed, error logs)
device and session identifiers, approximate location derived from IP
usage metrics (tool usage, credit consumption, performance and reliability data).

Content you provide

any text, prompts, files, images, documents, messages, and other materials you upload or create
outputs generated from your inputs
for collaboration or community features, data you post or share with others.

Communications

support requests, feedback, survey responses, and other communications with us.

3. How we use personal data

We use personal data to:

provide and operate the Services, including tool features and collaboration
authenticate users and secure accounts
process payments, manage subscriptions and credits
respond to support requests and communicate service notices
monitor, prevent, and investigate abuse, fraud, security incidents, and unlawful activity
improve and maintain the Services (including debugging, testing, and performance monitoring)
comply with legal obligations and enforce our Terms.

4. Legal bases

Under UK GDPR, we rely on:

contract: to provide the Services you request
legitimate interests: to secure and improve the Services, prevent abuse, and operate our business (balanced against your rights)
consent: where required (for example certain marketing or non-essential cookies, if used)
legal obligation: to comply with law (for example tax, accounting, lawful requests).

5. AI and third-party processing

Some tools process your inputs to generate outputs using automated systems, including AI.

This may involve sending relevant portions of your Content to third-party service providers such as:

AI model and inference providers
file processing providers (for example document parsing or image processing)
hosting, storage, and infrastructure providers
communications providers (email, messaging)
payment processors.

Important: Third-party providers may be located outside the UK. We limit the data shared to what is necessary to provide the relevant feature.

You should not submit sensitive personal data to AI tools unless you have a lawful basis and it is strictly necessary. If you do, you do so at your own risk.

6. Who we share data with

We may share personal data with:

service providers that help us operate the Services (hosting, storage, email delivery, payments, customer support, security, and AI processing)
professional advisers (lawyers, accountants, auditors) where necessary
authorities where required by law or to protect rights and safety
other users where you choose to share Content through collaboration, public links, widgets, or community features.

We do not sell your personal data.

7. International transfers

If personal data is transferred outside the UK (and where applicable the EEA), we use appropriate safeguards such as:

UK International Data Transfer Agreement (IDTA) and/or addendum
adequacy regulations where available
other lawful transfer mechanisms.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including:

while your account is active
for a reasonable period after closure to handle disputes, enforce agreements, and comply with legal obligations
longer where required by law (for example accounting and tax records).

Where possible, we delete or anonymise data.

9. Security

We implement technical and organisational measures designed to protect personal data, including access controls and secure storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your location and applicable law, you may have rights to:

access your personal data
correct inaccurate data
delete data (in some cases)
restrict or object to processing
data portability
withdraw consent (where processing is based on consent).

You can exercise rights by contacting us using the details above. You also have the right to complain to the UK Information Commissioner's Office (ICO).

11. Cookies and similar technologies

We may use cookies and similar technologies to:

keep you signed in and maintain sessions
enable core site functionality and security
remember preferences.

If we use non-essential cookies (for example analytics or marketing), we will request consent where required. You can also control cookies through your browser settings.

12. Children

The Services are not intended for children under 18, and we do not knowingly collect personal data from children.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will apply from the date it is posted (or the later date stated).