Privacy Policy
Last updated: September 2026 · Weld AI · York, England
Plain English summary: Your documents, search index and chat history stay on your server. For each question, Weld AI sends Claude AI your question, the recent conversation, the names of the files it quotes, and a few short excerpts with common identifiers removed. Anthropic does not train on your data and deletes it within 30 days. We collect only the minimum personal data needed to provide our services.
1. Who we are
Weld AI is a software installation and consulting service based in York, England. We provide private AI document assistant software for small and medium-sized businesses.
Contact: hello@weldai.uk · weldai.uk
2. How the Weld AI software handles your data
The Weld AI software is installed and runs entirely on your own server. The following table shows exactly what stays on your server and what is sent externally:
| Data | Stays on your server | Sent externally |
|---|
| Your documents (PDF, Word, Excel etc.) | ✓ Always | ✗ Never |
| Document index (vector database) | ✓ Always | ✗ Never |
| Conversation history (stored) | ✓ Always | ✗ Never |
| Your Anthropic API key | ✓ Always | ✗ Never sent to Weld AI |
| Your question (per query) | | Sent to Anthropic Claude API only |
| Recent conversation (per query) | | The last few messages, so follow-up questions make sense. Sent to Anthropic Claude API only |
| Relevant document excerpts (per query) | | Up to 8 short excerpts (about 1,000 characters each), with identifiers removed. Sent to Anthropic Claude API only |
| File names and page numbers of those excerpts | | Sent so answers can cite their source. Anthropic Claude API only |
| Usage analytics / telemetry | ✓ None collected | ✗ Never |
Before excerpts are sent, Weld AI removes National Insurance numbers, UTRs, bank sort codes and account numbers, IBANs, payment card numbers, email addresses, phone numbers, passwords and PINs. This is pattern-based: it does not remove names, addresses or other free text, and your question is sent as typed. File names are sent as they are, so avoid putting sensitive details in file names.
Document search and ranking run entirely on your server. Weld AI does not have access to your documents, queries, conversation history, or API key at any time.
3. Anthropic Claude API
When using the Claude API integration, your questions and relevant document excerpts are sent to Anthropic's API to generate answers. Anthropic makes the following commitments for API customers:
- No training on API data — Anthropic does not use API inputs and outputs to train its foundation models. This is a flat policy for all API users, not an opt-out. Your queries are processed to generate an answer and are not retained for training purposes.
- Data deleted within 30 days — Anthropic automatically deletes API inputs and outputs from their backend systems within 30 days of receipt. Data is never used to train their models. For full details see Anthropic's commercial data retention policy.
- SOC 2 Type II certified — enterprise-grade security certification.
- HTTPS encrypted — all communication is TLS encrypted in transit.
- Data Processing Addendum (DPA) available — Anthropic provides a DPA which includes Standard Contractual Clauses (SCCs) for EU data transfers and the UK International Data Transfer Addendum for UK data transfers. This is automatically incorporated into Anthropic's Commercial Terms for API customers.
Important — data location: Anthropic's API has no UK or EU processing option. Data is processed outside the UK, primarily in the United States. Transfers are covered by the UK International Data Transfer Addendum in Anthropic's DPA, but you should be aware that the data sent per question leaves the UK for processing.
For solicitors, accountants, and regulated firms: As the data controller, your firm remains responsible for ensuring that sending document excerpts to Anthropic's API is consistent with your client confidentiality obligations and your firm's data protection policies. We recommend the following steps before processing client-specific documents:
- Review Anthropic's Data Processing Agreement — this is incorporated automatically when you create an API account under Anthropic's Commercial Terms.
- Confirm with your compliance officer or DPO that processing under the UK International Data Transfer Addendum is acceptable for your firm.
- Consider whether any documents contain information that should not leave UK jurisdiction before uploading them to the system.
For full details, see Anthropic's Privacy Policy and API Terms of Service.
4. What personal data we collect about you
When you use our website or contact us, we may collect:
- Your name, email address, and company name (when you submit an enquiry)
- Basic website analytics (page views, general location)
- Email correspondence you send to us
We do not collect payment information directly — payments are handled by third-party processors.
5. How we use your data
- To respond to your enquiries and provide our services
- To send service-related communications
- To improve our website and services
We will never sell your personal data or use it for unsolicited marketing.
6. Legal basis for processing (UK GDPR)
- Contract: Processing necessary to provide the services you've requested
- Legitimate interests: Improving our services, responding to enquiries
- Consent: Where you have explicitly opted in
7. Data retention
We retain enquiry data for up to 2 years. Email correspondence is retained for up to 6 years for legal and contractual purposes.
8. Your rights
Under UK GDPR, you have the right to access, correct, delete, or port your personal data, and to lodge a complaint with the ICO at ico.org.uk. Contact: hello@weldai.uk
9. Cookies
Our website uses only essential cookies. We do not use advertising or tracking cookies.
10. Contact
Email: hello@weldai.uk
Website: weldai.uk
Location: York, England, United Kingdom