Privacy
Your AI Report is a trading name of Lura Labs Ltd, registered in England and Wales, company number 17180996, at 5th Floor, 167-169 Great Portland Street, London, England, W1W 5PF.
This page explains what we do with your information. It is short because we hold very little.
The short version
We use your email address to run your check and to send you your report. We do not store it, we do not sell it, and we do not add you to a mailing list.
Your email address is never stored. Your report is deleted automatically after 7 days.
What we collect
Your email address. You give us this to run the check. We use it to search public records and to send you your report.
We do not keep it. Our records hold only a one way scrambled version of your address, which lets us match your payment to your report and cannot be turned back into your address.
A Facebook profile link, if you choose to give us one. This is optional. We use it once, to look at what your profile shows to someone who is not your friend.
Your payment details, which we never see. Payments are handled by Stripe. Your card details go to Stripe and never reach us.
Basic technical information. Like any website, our servers record things such as the type of device you used and the time of your visit, so that the site works and stays secure.
How the site is used. We use PostHog, hosted in the European Union, to count visits and see which parts of the site people use. It does not store anything on your device and it does not identify you. We use it to improve the site, which the law calls a legitimate interest. You can object by writing to privacy@yourAIreport.co.uk.
Who we share it with
To find what is publicly available about you, we send your email address to services that hold public records. These are:
- Have I Been Pwned, which holds a register of known data breaches
- EmailRep, which records how widely an address appears online
- DeHashed, which searches leaked data being traded
- Hunter, which looks for public pages and profiles linked to an address
- Gravatar, which holds publicly published profile pictures
- SerpAPI, which searches public web pages
We also use Stripe to take payment, Resend to send you your report, Upstash to hold your report for the seven days before it is deleted, and PostHog to count visits.
Anthropic, whose Claude service writes your report in plain English from what we found. It receives your email address and the findings.
Stripe holds your email address as part of your purchase record, under its own privacy policy. This is the one place your address is kept, and it is kept by Stripe rather than by us.
We do not sell your information to anyone, and we never will.
How long we keep things
| What | How long |
|---|---|
| Your email address | Not stored |
| The scrambled version of your address | Kept with your order record |
| Your report | Deleted automatically after 7 days |
| Your findings | Not stored beyond your report |
Why we are allowed to do this
Under UK data protection law we rely on performance of a contract: you have asked us to check your email address and send you a report, and we cannot do that without processing the address.
For counting visits we rely on legitimate interests: we need to know whether the site works in order to improve it, and we do this without storing anything on your device or identifying you.
Your rights
You can ask us to tell you what we hold, to correct it, to delete it, or to send it to you in a portable form. You can object to our processing or ask us to restrict it.
In practice we hold almost nothing, so most requests are answered quickly.
Write to privacy@yourAIreport.co.uk and we will respond within 30 days.
If you are not happy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We use only the cookies the site needs in order to work, such as remembering your place in a purchase. We do not use advertising cookies, and our analytics does not use cookies at all.
Where your information goes
Some of the services above are based outside the UK. Where that is the case, the transfer is covered by the safeguards UK law requires, such as standard contractual clauses.
Changes
If we change this page we will update the date below. Material changes will be flagged on the site.
Last updated: 9 October 2026