Last updated: 15 May 2026
1. Who we are
Stemma AI Ltd (“Stemma”, “we”, “us”) is the controller of the personal data described in this policy. We are a company incorporated in England and Wales (company number 17020896), with registered office at Forma House, 40 Bowling Green Lane, London, EC1R 0NE.
If you have any questions about this policy or your personal data, contact us at legal@stemma-ai.com.
2. What this policy covers
This policy explains how we handle personal data when you visit our website, contact us, or use our cloud-based software (the “Service”).
When we process personal data that customers upload to or provide through the Service, we act as a processor on behalf of our customers, who are the controllers of that data. That processing is governed by the agreement between us and the relevant customer, not by this policy.
This policy does not cover the practices of third parties we do not own or control.
3. Personal data we collect
We collect:
- Contact and profile data: name, business email, username, job title and company.
- Account and usage data: login records, IP address, device and browser information, and how you interact with the Service.
- Communications: information you provide when you email us, request a demo, or otherwise contact us.
4. How we use personal data and our lawful basis
- To provide and administer the Service and your account: performance of our contract with you.
- To respond to enquiries and provide support: our legitimate interests and, where applicable, performance of our contract.
- To send business communications and market the Service to organisations and their representatives: our legitimate interests.
- To keep the Service secure, prevent fraud and resolve technical issues: our legitimate interests.
- To comply with our legal obligations: compliance with a legal obligation.
5. Who we share personal data with
We share personal data with:
- Service providers who host and support the Service, such as cloud hosting and infrastructure providers.
- Professional advisers such as our lawyers and accountants.
- Authorities or other parties where required by law.
- A buyer or successor entity in connection with a merger, acquisition or sale of our business.
We do not sell personal data.
6. International transfers
Some of our service providers may process personal data outside the UK. Where this happens, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or the UK addendum to the EU Standard Contractual Clauses, or transfers to countries the UK government recognises as providing an adequate level of protection.
7. How long we keep personal data
We keep personal data for as long as you have an account with us or as needed to provide the Service, and afterwards only where necessary to meet our legal obligations, resolve disputes, or enforce our agreements.
8. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to data portability, and to withdraw consent where our processing is based on consent. To exercise any of these rights, email legal@stemma-ai.com.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version on our website and update the date above.
11. Contact
Stemma AI Ltd
Forma House, 40 Bowling Green Lane, London, EC1R 0NE
Email: legal@stemma-ai.com