Sub-processors

Vercel

Hosts the site in the London region, keeps the server logs (including a short record of errors and AI calls), runs the scheduled jobs, and runs the Vercel AI Gateway that carries every tutor model call. Data: Pages you request, server logs, and the prompts sent through the AI Gateway.

Neon

Stores the database (Postgres, hosted in AWS London, eu-west-2). Data: Your account, study record, tutor messages, CPD entries, learner reports, AI-call records (model, size and estimated cost, not the text) and subscription status.

Clerk

Signs you in, sends the sign-in and verification emails, and holds the firm organisation if you create one. No separate email service is used. Data: Name, email address, and sign-in identifiers.

Stripe

Takes the card, runs Checkout and the billing portal, and sends payment receipts. Dutyholders is not VAT registered, so no VAT is calculated. Data: Billing name, billing address, and the card. The card number stays at Stripe. This site stores the customer id and the subscription status, not the card.

Vercel AI Gateway (model providers)

The gateway routes each tutor request to one of these model providers. The default tutor uses OpenAI. If that model is unavailable the gateway can use Mistral, Google (Gemini) or xAI. Data: The question or answer you type, and the clause excerpts retrieved for it. OpenAI: the default model for the coach and for "Explain my mistake". Mistral: coach fallback. Google: chat fallback. xAI: last chat fallback.

GitHub

Receives the weekly issues listing questions learners keep missing and tutor refusals, and an alert when a learner reports a question. The repository is private. Data: Question identifiers and counts. Tutor feedback issues can include a clipped copy of a learner's tutor question, with no name or email.

Not used

Search embeddings are computed on the server by a local model. No embedding provider receives your text.

Source PDFs are not stored with a third party by the live site.

Sentry (error reports) and Langfuse (AI traces) are built in but switched off. Nothing is sent to them. This page will name them before they are switched on.

There is no analytics or advertising service on the site.