Privacy Policy
Last updated: May 2026 · Weld AI · York, England
Plain English summary: Your documents never leave your server. Only your question and the most relevant text excerpts are sent to Claude AI per query. Anthropic does not train on your data. We collect only the minimum personal data needed to provide our services.
1. Who we are
Weld AI is a software installation and consulting service based in York, England. We provide private AI document assistant software for small and medium-sized businesses.
Contact: hello@weldai.uk · weldai.uk
2. How the Weld AI software handles your data
The Weld AI software is installed and runs entirely on your own server. The following table shows exactly what stays on your server and what is sent externally:
| Data | Stays on your server | Sent externally |
|---|
| Your documents (PDF, Word, Excel etc.) | ✓ Always | ✗ Never |
| Document index (vector database) | ✓ Always | ✗ Never |
| Conversation history | ✓ Always | ✗ Never |
| Your Anthropic API key | ✓ Always | ✗ Never sent to Weld AI |
| Your question (per query) | | Sent to Anthropic Claude API only |
| Relevant document excerpts (per query) | | The most relevant excerpts sent to Anthropic Claude API only |
| Usage analytics / telemetry | ✓ None collected | ✗ Never |
Weld AI does not have access to your documents, queries, conversation history, or API key at any time.
3. Anthropic Claude API
When using the Claude API integration, your questions and relevant document excerpts are sent to Anthropic's API to generate answers. Anthropic makes the following commitments for API customers:
- No training on API data — Anthropic does not use API inputs and outputs to train its foundation models. This is a flat policy for all API users, not an opt-out. Your queries are processed to generate an answer and are not retained for training purposes.
- Data deleted within 30 days — Anthropic automatically deletes API inputs and outputs from their backend systems within 30 days of receipt. Data is never used to train their models. For full details see Anthropic's commercial data retention policy.
- SOC 2 Type II certified — enterprise-grade security certification.
- HTTPS encrypted — all communication is TLS encrypted in transit.
- Data Processing Agreement (DPA) available — Anthropic provides a DPA which includes Standard Contractual Clauses (SCCs) for EU data transfers and UK International Data Transfer Agreement (IDTA) for UK data transfers. This is automatically incorporated into Anthropic's Commercial Terms for API customers.
Important — data location: Anthropic's API processes all data on servers located in the United States. There is no EU or UK hosting option. Data transfers from the UK to the US are covered by the UK IDTA included in Anthropic's DPA, but you should be aware that your data leaves the UK for processing.
For solicitors, accountants, and regulated firms: As the data controller, your firm remains responsible for ensuring that sending document excerpts to Anthropic's API is consistent with your client confidentiality obligations and your firm's data protection policies. We recommend the following steps before processing client-specific documents:
- Review Anthropic's Data Processing Agreement — this is incorporated automatically when you create an API account under Anthropic's Commercial Terms.
- Confirm with your compliance officer or DPO that processing under the UK IDTA is acceptable for your firm.
- Consider whether any documents contain information that should not leave UK jurisdiction before uploading them to the system.
For full details, see Anthropic's Privacy Policy and API Terms of Service.
4. What personal data we collect about you
When you use our website or contact us, we may collect:
- Your name, email address, and company name (when you submit an enquiry)
- Basic website analytics (page views, general location)
- Email correspondence you send to us
We do not collect payment information directly — payments are handled by third-party processors.
5. How we use your data
- To respond to your enquiries and provide our services
- To send service-related communications
- To improve our website and services
We will never sell your personal data or use it for unsolicited marketing.
6. Legal basis for processing (UK GDPR)
- Contract: Processing necessary to provide the services you've requested
- Legitimate interests: Improving our services, responding to enquiries
- Consent: Where you have explicitly opted in
7. Data retention
We retain enquiry data for up to 2 years. Email correspondence is retained for up to 6 years for legal and contractual purposes.
8. Your rights
Under UK GDPR, you have the right to access, correct, delete, or port your personal data, and to lodge a complaint with the ICO at ico.org.uk. Contact: hello@weldai.uk
9. Cookies
Our website uses only essential cookies. We do not use advertising or tracking cookies.
10. Contact
Email: hello@weldai.uk
Website: weldai.uk
Location: York, England, United Kingdom