Privacy Policy

1. Who we are

Other Me is operated by Pop Hasta Labs Ltd (“we”, “us”), a company registered in the United Kingdom. We are the data controller for personal data processed about visitors to this site and our account holders. For client data processed inside the product on behalf of our customers, we act as a data processor — see our Data Processing Addendum.

2. What we collect

• Account data — name, work email, company, role and billing details.
• Usage data — how you interact with the product and site, for security and improvement.
• Support data — information you share when you contact us.
• Desktop app data — our free desktop apps have no account and no sign-up. If you give us an email address when you download one, we keep it (with your name, if you gave one) so we can tell you about updates. Each time an app starts it sends us a random installation reference it made up on first run, which app it is, its version, your operating system version, and — unavoidably, as with any internet request — the IP address it connected from. We keep that IP so we can count how many copies are in use, notice when one copy is running in many places at once, and know which versions are still out there to target updates. The apps never send us your documents, your mail, your file names or anything you type.

Inside the product, personal data you and your clients enter is tokenised by our Secure Context Retrieval System (SCRS) before any AI model or search index processes it.

3. How we use it

To provide and secure the service, process payments, respond to enquiries, meet legal obligations, and improve the product. We do not use your or your clients’ content to train shared AI models.

4. Legal bases

We rely on contract (to deliver the service), legitimate interests (to secure and improve it), consent (where required, e.g. some cookies and marketing), and legal obligation.

5. Sharing

We share data only with vetted sub-processors needed to run the service (for example, infrastructure, payment and — governed via SCRS — AI inference). The current list is published at Sub-processors. We never sell personal data.

6. International transfers

We host in the UK/EU and support data residency. Where transfers occur, we use appropriate safeguards such as the UK IDTA or EU Standard Contractual Clauses.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Account holders can configure retention for product data in the Control Center.

For the desktop apps: we keep one record per installed copy for as long as it is still starting up, and we keep only the ten most recent IP addresses it has connected from — older ones are dropped. That is a short recent window, deliberately, and not a location history. Ask us at the address below to have a download email address or an installation record deleted, and we will.

8. Your rights

Subject to law, you may access, correct, delete, restrict or port your personal data, and object to certain processing. To exercise these, contact us using the details below. You may also complain to the UK Information Commissioner’s Office (ICO).

9. Security

We protect data with encryption, access controls, the SCRS firewall and a tamper-evident audit trail. SOC 2, ISO 27001 and ISO 42001 are on our roadmap — we hold none of them today, and we will say so on this page when that changes.

10. Contact

Questions or requests: privacy@pophastalabs.com, Pop Hasta Labs Ltd, a company registered in England and Wales (no. 16742039), registered office 128 City Road, London EC1V 2NX, United Kingdom. See also our Cookie Policy and Terms.