Last updated: September 2026
1. Information We Collect
Citadel AML (“Citadel AML”) collects account and waitlist details (name, email, role, organisation), billing identifiers via Stripe, product usage / telemetry required to operate metering, and support communications. For education products we may process student or parent data only as instructed by the institutional customer or with appropriate consent.
2. How We Use Your Data
To provide Citadel AML, process invitations and waitlists, bill subscriptions, improve reliability, prevent abuse, and meet legal obligations. We do not sell personal data.
3. Subprocessors
Typical processors include hosting (e.g. Vercel / cloud DB), Stripe (payments), email/SMS providers (invites and transactional messages), and analytics required for product health. A current list is available on request at go-live.
4. Retention & Deletion
Account data is retained while your subscription or waitlist entry is active and for a reasonable period afterward for audits and disputes. You may request deletion subject to legal retention duties.
5. Cookies
We use essential cookies for authentication and security, and limited analytics cookies to understand product usage on the Citadel AML website and desk.
6. Lawful Bases
Contract performance, legitimate interests (security, product improvement), consent where required (marketing emails, certain cookies), and legal obligation.
7. Your Rights
Under UK GDPR you may access, rectify, erase, restrict, object, or port your data, and lodge a complaint with the ICO. Contact the controller below.
8. Security
We apply access controls, encryption in transit, and least-privilege practices appropriate to a B2B SaaS. No method of transmission is 100% secure.
9. Controller & Contact
Controller: Modex Ventures for Citadel AML. Product path: /citadel-aml. Privacy requests: privacy@citadelaml.modex.invalid (production mailbox at go-live).
10. Changes
We may update this policy; material changes will be posted on this page with a new “Last updated” date. Continued use of Citadel AML after notice constitutes acceptance where permitted by law.