1. Introduction

Expera ("we," "us," "our," or "Company") is a trading name of Find Umbrella Ltd, a company registered in England and Wales (company no. 13009084), with its registered office at Kemp House, 128 City Road, London, England, EC1V 2NX. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect information you provide directly, including:

Account registration information (name, email, company)
Payment and billing information
Contact and communication preferences
Content you create (articles, topics, knowledgebase)
Website URLs and analytics data you connect
Information about your business needs and use case

We also collect information automatically, including:

Usage data (pages visited, features used)
Device and browser information
IP address and approximate location
Referral source and marketing attribution data

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Generate AI-powered content using your inputs and knowledgebase
Process transactions and send related information
Send promotional and transactional communications
Analyze and improve user experience
Detect and prevent fraud or abuse
Comply with legal obligations

4. AI and Your Data

Our service uses artificial intelligence to generate content. Here is how your data is handled:

Your content, brand voice, and knowledgebase are used to personalize AI-generated outputs for you
We do not use your data to train our AI models or any third-party models
AI processing is performed by OpenAI under their business API terms, which prohibit using your data for training
Generated content belongs to you once created - see our Terms of Service for details

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

6. Third-Party Services

We use trusted third-party services to operate our platform:

Google Cloud Platform — hosting, database (Firestore), Cloud Run
Firebase Auth — user authentication
Stripe — payment processing (PCI-compliant)
OpenAI — AI enrichment and analysis (data sharing disabled, no training)
Resend — transactional email and cold outreach
Twilio — SMS messaging (with your consent)
Sentry — error monitoring
Cloudflare — CDN, DNS, bot protection (Turnstile)
Redis (Upstash) — rate limiting and session cache
ScrapingBee — web scraping for company research
Hunter.io — email verification and finding
Companies House (UK) — public company registry data

When you sign in with a third-party provider, we may also receive data from:

Google OAuth — authentication
Microsoft OAuth — authentication

These providers are contractually obligated to use your information only as necessary to provide services to us.

7. Cookies and Tracking

We use cookies and similar technologies for:

Essential site functionality (authentication, preferences)
Analytics and performance monitoring (with your consent)
Marketing attribution (with your consent)

You can manage your cookie preferences through the consent banner shown when you first visit our site, or by adjusting your browser settings.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services:

Account and content data - until you delete your account
Usage analytics - 26 months
Marketing attribution - 2 years
AI processing logs - 30 days

9. Your Rights

Depending on your location, you may have the right to:

Access your personal information
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Opt-out of marketing communications
Withdraw consent for optional processing
Lodge a complaint with a supervisory authority

To exercise these rights, contact us at info@expera.com or use the account settings in our platform.

10. International Transfers

Your data may be processed in the United States where our service providers are located. We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at info@expera.com.

Last updated: February 2026