Privacy Policy

Last updated: 05/10/2026

1. Who we are

AiCert° (the website aicertpro.co.uk and the app at aicertpro.app) is operated by AI Energy Limited, a company registered in England and Wales (Company No. 14953433). Registered office: Stanton House, Coxhill Way, Aylesbury, HP21 8FW.

Contact for anything in this policy: aienergy.maintain@gmail.com.

AiCert° is software for UK electricians and electrical contractors. It is not a certification body and does not issue certificates itself.

Our two roles

Controller. We decide how your account data is used. This covers your sign-up details, profile, billing, support tickets, and use of our website.

Processor. Electricians store their own customers' details in AiCert°: names, addresses, phone numbers, certificates, photos, invoices and messages. For that data the electrician or their company is the controller and we act on their instructions. If you are a homeowner, tenant or landlord whose details appear in AiCert°, please contact the electrician first. We will help them answer your request.

2. Data we collect

CategoryWhat it includesWhere it comes from
Account and profileName, email, phone, company name and address, position, qualifications, signature, test equipment details, home base address, hourly rateYou
Business and invoice detailsVAT number, company registration number, registered office, bank account name, bank name, sort code, account number, invoice terms, logoYou
TeamNames and emails of people you invite, their access type (Full Access, Office, Field Worker) and statusYou or your company
Customers and propertiesCustomer names, emails, phones, property addresses and coordinates, job descriptions, notes, documents, materials, visitsYou
CertificatesEICR, EIC and Minor Works data: test results, observations, circuit schedules, engineer and customer signatures, PDFsYou
Photos and filesSite and consumer unit photos, receipts, uploaded documentsYou
Location (optional)GPS points with time, speed and accuracy, detected stops, site visits and tripsYour device, only if you turn tracking on
FinanceInvoices, payments recorded, job costsYou
Messages (paid plans)Emails, WhatsApp and SMS messages with your customers and their attachmentsYou and your customers, via connected accounts
AI assistantQuestions you ask the assistant and its answersYou
BillingPlan, subscription status, credit balance and purchases. Card details are held by Stripe, not by usYou and Stripe
SupportSupport ticket subject and messageYou
TechnicalIP address, browser and device type, logs needed to run and secure the serviceYour device

We do not ask for special category data (health, ethnicity and so on). Please do not put it in notes or messages.

3. How we use data and our lawful bases

PurposeLawful basis (UK GDPR Art. 6)
Create and run your account, store your jobs, certificates and documents, generate PDFsContract
Take payment for subscriptions and certificate creditsContract
Send emails and messages you ask the app to sendContract
Location tracking, stop detection and time on siteConsent (you switch it on and can switch it off)
AI features: board photo recognition, receipt reading, assistant answers, message draftsContract, as a feature you choose to use
Keep the service secure, prevent fraud and misuse, fix errorsLegitimate interests
Keep invoices and payment records for taxLegal obligation
Product update emailsLegitimate interests for existing customers, with an unsubscribe link in every email
Website measurement and advertising attributionConsent (cookie banner)

We do not sell personal data. We do not use your data or your customers' data for advertising profiles.

4. AI features

AI in AiCert° suggests; a qualified person decides. Every certificate is checked and signed by the electrician before it is issued.

  • AiBoard. Photos of a consumer unit or distribution board are sent to our AI pipeline (n8n and an AI model provider) to suggest devices and circuit details. The result is stored with the draft certificate.
  • Receipt reading. Uploaded receipts and PDFs are sent to an AI model to extract supplier and totals.
  • AI assistant (paid plans). Your questions, and the business data needed to answer them, are sent to an AI model. Conversations are saved in your account so you can see past answers. You can clear them.
  • Insights and message drafts (paid plans). Job and finance figures, or a customer conversation, are sent to an AI model to produce explanations or a draft reply.

AI requests go through the Lovable AI Gateway to OpenAI models, either directly or from our n8n workflows. Under OpenAI's API terms, data sent through the API is not used to train their models. OpenAI may keep it for up to 30 days to detect abuse, then deletes it. We do not use your data to train AI models ourselves.

AI output can be wrong. You are responsible for checking it before relying on it, especially on a certificate.

5. Location tracking

Location tracking is off until you switch it on in your profile, and you can switch it off at any time.

  • What it does. It records GPS points from your device, or from OwnTracks or GPSLogger if you connect them with your personal tracker link. Points are turned into stops, site visits and trips to show time on site and mileage.
  • When it runs. Only within the working hours you set. Points outside those hours are discarded.
  • Home base. Stops within your chosen radius of home are labelled "Home base" and are not linked to any job.
  • Turning it off. Switch off tracking in your profile. Tracker links then stop accepting points, and you can reset the link at any time.

For employers. If your company asks staff to use tracking, your company is the controller of that data. You must tell staff what is recorded and why, limit it to working hours, and have a lawful basis for it. Field Workers cannot see colleagues' locations; people with Full Access or Office access in your company may see team records.

6. Who we share data with

We use the service providers below to run AiCert°. Each acts on our instructions under a data processing agreement.

ProviderWhat they doLocation
CloudflareHosting and running the appGlobal network
Supabase (via Lovable Cloud)Database, sign-in, file storageUK
LovablePlatform and AI gatewayEU
OpenAI (via Lovable AI Gateway and n8n)AI processing for AiBoard, receipts, assistant, insights and draftsUSA
n8nAI workflows for board photos and certificate draftsEU (Germany)
StripePayments for subscriptions and certificate creditsUK, EU, USA
GoogleGmail sending (when you connect Gmail), Maps geocoding and routes, Google sign-in if usedEU, USA
AurinkoEmail sync when you connect a mailbox (paid plans)USA
InfobipWhatsApp and SMS messages (paid plans)EU (Croatia), global network
Ideal PostcodesUK postcode address lookupUK
OpenAI (advertising measurement)Website visit and sign-up measurement, only with cookie consentUSA

We may also share data when the law requires it, or with a buyer if the business is sold, under the same protections.

7. International transfers

Some providers process data outside the UK, mainly in the EU and the USA. Transfers to the EU rely on UK adequacy regulations. Transfers to the USA rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

8. How long we keep data

DataHow long
Account, jobs, customers, certificates, photos, documentsWhile your account is open. After you close it, 90 days to let you export, then deleted
Invoices and payment records for your subscription and credits6 years after the end of the financial year (UK tax law)
Location points12 months, unless you delete them sooner
AI assistant conversationsUntil you clear them or close your account
Support tickets2 years after closing
Security and server logs12 months

Electricians often need to keep certificates for many years. Download your certificates before closing your account; we cannot keep them for you after closure. Backups are overwritten within 30 days of deletion.

9. Security

  • All traffic is encrypted in transit (HTTPS/TLS).
  • Database rules keep each company's data separate, and Field Workers see only the jobs assigned to them.
  • Files such as certificates and photos are kept in private storage and shared through short-lived links.
  • Connection secrets for Gmail and other services are stored encrypted and are not readable from the app.
  • Payment card details are handled by Stripe and never stored by us.

If a breach is likely to put your rights at risk, we will tell the ICO within 72 hours of becoming aware of it, and tell you without undue delay.

10. Your rights

Under UK GDPR you can ask us to:

  • give you a copy of your data
  • correct inaccurate data
  • delete your data, where we no longer need to keep it
  • restrict or object to some processing
  • give you your data in a portable format
  • stop processing based on consent, at any time

Email aienergy.maintain@gmail.com. We reply within one month. If your details were added by an electrician, we will pass your request to them, as they are the controller.

You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to help first.

11. Cookies

The app uses only the storage needed to keep you signed in and remember settings. Our website uses analytics and advertising measurement only if you accept them in the cookie banner. See our Cookie Policy.

12. Children

AiCert° is for working professionals aged 18 or over. We do not knowingly collect data from children.

13. Changes

We will post changes here and update the date at the top. If a change is significant, we will tell you by email or in the app.

14. Contact

AI Energy Limited, Stanton House, Coxhill Way, Aylesbury, HP21 8FW. Email: aienergy.maintain@gmail.com.