Privacy Policy

Last updated: 18 March 2026

This Privacy Policy explains how Appeal Ticket CRUSADER ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Appeal Ticket CRUSADER is the data controller for personal data collected through this website. Contact: support@appealticket.com.

2. What Data We Collect

Account Data

• Email address (required for registration)
• Password (stored securely by Firebase Authentication, not accessible to us)

Analysis Data

• Photographs of parking tickets that you upload
• AI-generated analysis results and appeal letters
• Any additional context you provide to enhance your letter

Payment Data

• Payment transaction records (amount, date, Stripe session ID)
• We do not store credit card numbers, CVVs, or full card details — these are handled entirely by Stripe

Technical Data

• IP address, browser type, device information (collected automatically)
• Usage analytics via Google Firebase Analytics

3. How We Use Your Data

We use your data for the following purposes:

• Service delivery: To analyse your PCN and generate appeal letters
• Account management: To manage your user account and authentication
• Payment processing: To process payments through Stripe
• Email communications: To send you your appeal letter by email (if requested)
• Service improvement: To understand how our service is used and improve it

4. Legal Basis for Processing

• Contract: Processing your PCN image and generating an appeal letter is necessary to perform our contract with you
• Legitimate interest: Analytics and service improvement
• Consent: Marketing communications (if any)

5. Third-Party Services

We share data with the following third-party processors:

• Google Firebase (Authentication, Firestore database, Analytics) — Firebase Privacy
• Google Gemini AI — Your uploaded PCN image is sent to Google's AI for analysis. Google's data processing terms apply.
• Stripe — Payment processing. Stripe Privacy Policy
• SendGrid (if configured) — Email delivery

6. Data Retention

• Account data: Retained while your account is active. You may request deletion at any time.
• Analysis data: Retained for 12 months after creation, then automatically deleted.
• Payment records: Retained for 6 years as required by UK tax law.
• Uploaded images: Processed in memory and not permanently stored on our servers. Images are sent to the AI provider for analysis and are subject to their retention policies.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, contact support@appealticket.com.

8. Cookies

We use essential cookies for authentication and session management. We use Firebase Analytics which may set analytics cookies. No advertising cookies are used.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure authentication (Firebase Auth), and access controls on our database.

10. Children

Our service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top will reflect the most recent revision.

12. Complaints

If you have concerns about how we handle your data, you can contact us at support@appealticket.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.