Privacy Policy

Pre-launch privacy notice · Updated 25 September 2026

Who we are

Give It To George is operated by CoreSeed Ltd, registered in England and Wales. George is the personal assistant offered through the service. CoreSeed Ltd is responsible as controller for personal information it uses to operate George. WhatsApp, Meta and other providers may also act as controllers for their own services.

What is available today

The public website introduces George. Public onboarding is not open. Controlled WhatsApp testing is limited to identity, messages and consent; live AI reasoning and supplier actions have not launched. This notice distinguishes those tests from the wider service being developed.

Information we handle

When you participate in an agreed test or use a supported feature, information may include your WhatsApp phone number and account identity, messages, delivery information, consent choices, documents or images you choose to provide, and details of bills, renewals, refunds or other cases. Case records can include responsibilities, deadlines, permissions, progress and evidence of outcomes. Please avoid sending passwords, payment-card details or unnecessary sensitive information.

Website and infrastructure providers may process technical information such as IP addresses, request times and browser details to deliver and secure the site.

Why information is used

We use information to identify the correct customer, respond to requests, keep track of agreed responsibilities, record permissions, investigate errors and protect the service. Where applicable, the legal basis is taking steps at your request or performing our service agreement; legitimate interests in security and reliable operation; compliance with legal obligations; or consent where required. Agreeing to proactive WhatsApp updates does not authorise marketing or supplier actions. You can withdraw that update consent with STOP; START can enable it again.

AI and human review

George is being developed to use AI providers to help interpret requests and documents and prepare responses. Live model integration is not enabled in the current identity-and-consent test. Before enabling it, we will confirm providers, processing terms and what data is shared, and update this notice. AI can make mistakes; supported consequential actions require appropriate customer authority. Authorised operators may review cases or technical issues.

Service providers and international processing

WhatsApp messages pass through WhatsApp/Meta and Twilio. Our website is hosted on Vercel; staging application and database services run on OVH infrastructure; encrypted database backups use Cloudflare R2 object storage. Document storage may use application storage or a configured object-storage provider. These providers process data needed for their services under their applicable terms.

Processing may involve countries outside the UK. Before expanding the service, we need to confirm processing locations and any required UK transfer safeguards. We do not claim that all information stays in the UK. WhatsApp and Facebook use are also subject to their own privacy notices.

Retention and deletion

Raw documents are intended to be temporary. The application records a deletion deadline and uses scheduled cleanup; this is not a guarantee of immediate deletion from every system or backup. Extracted case details, responsibilities, consent and audit records are separate from the original file and may remain to support the job, security and accountability. Backup copies are managed separately.

We have not finalised the retention schedule for case memory, audit records and backups. Contact us to request deletion or discuss what needs to be retained. End-to-end account erasure and backup handling must be confirmed before wider onboarding; STOP pauses proactive updates and does not delete your account.

Security

Implemented controls include HTTPS, authenticated access, customer-scoped data access, verification of incoming Twilio requests, private credential storage and encrypted off-server backups. No system can guarantee absolute security. Do not send confidential information through public social-media comments.

Cookies and analytics

The public pages do not include application analytics, advertising trackers or a customer signup form. The optional customer dashboard uses a session cookie after passwordless access; internal operations use a separate authenticated session. Hosting and platform providers may process technical data for delivery and security. We will update this notice before adding optional tracking.

Your rights and contact

Depending on the circumstances, UK data protection law gives you rights to access, correct or erase information, restrict or object to processing, and receive portable data. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. We may need to verify identity before acting on a request.

See our contact page for the current contact status. For privacy enquiries or requests to access, correct or delete information, email helpdesk@giveittogeorge.com or write to CoreSeed Ltd at 250 Ingram Avenue, Aylesbury, England, HP21 9DE. You can also complain to the Information Commissioner's Office.