Privacy Policy
Future Cover Ltd t/a IX (company number 14567626) Registered office: 128 City Road, London EC1V 2NX Contact: support@ix-platform.com
Last updated: 5 November 2026
1. Who we are and what this policy covers
Future Cover Ltd, trading as IX ("we", "us", "our"), provides the Intelligence Exchange platform ("IX"), which helps organisations see, control and attribute the cost of the AI models they use. This policy explains how we handle personal data when you:
- visit our website and landing page;
- ask for access, contact us or sign up;
- have an IX account; and
- use IX on behalf of an organisation that is our customer (including through developer tools connected to IX).
We are subject to UK data protection law: the UK GDPR and the Data Protection Act 2018.
2. Our two roles
How we use personal data depends on which of these roles we are in.
Where we are the controller. For website visitors, people who contact us, and the account details of people who sign in to IX, we decide why and how personal data is used. Sections 3 to 9 describe this.
Where we are the processor. When a customer uses IX with its own prompts, documents, outputs and usage records, the customer decides what is put into IX and why. In that case the customer is the controller and we process that content on its behalf, under a written data processing agreement. Section 10 describes this. If you are an employee of a customer and want to exercise your rights over content processed through IX, please contact your organisation first.
3. What personal data we collect (as controller)
| What | Examples | How we get it |
|---|---|---|
| Contact and enquiry details | Name, work email, company, role, the content of your message | You give us these when you request access or write to us |
| Account details | Name, email address, organisation, role and permissions, a securely hashed password, sign-in and session records | You, or your organisation's administrator, when an account is created |
| Platform activity linked to your account | Which user made a request, when, which model was used, token counts, cost and budget records, and security flags (see section 10) | Generated when you use IX |
| Ask IX conversations | The questions you type, the answers returned, and a record of any documents you attach (name, size and a fingerprint, not the document text) | You, when you use the Ask IX assistant |
| Billing details (when paid plans are available) | Billing contact, company details, payment status. Card numbers are handled by our payment provider and are not stored by us | You, via our payment provider |
| Technical data | IP address, browser type, and server logs needed to keep the service secure | Collected automatically when you connect |
We do not knowingly collect personal data from anyone under 18, and our services are for business use only.
4. Why we use it and our legal basis
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| To respond to enquiries and access requests | Legitimate interests (running our business and replying to you) |
| To create and run your account, authenticate you and provide IX | Contract (or steps taken at your request before a contract) |
| To keep IX secure, prevent misuse, and investigate incidents | Legitimate interests (protecting our service and customers) |
| To bill customers and keep financial records | Contract; legal obligation (accounting and tax law) |
| To send service notices (changes, outages, security) | Contract; legitimate interests |
| To send marketing to business contacts | Legitimate interests, with an easy opt-out in every message. We will ask for consent where the law requires it |
| To meet legal duties and respond to lawful requests | Legal obligation |
We do not sell personal data, and we do not use personal data from your account to train AI models.
5. Cookies and similar technologies
Our landing page does not use advertising or analytics cookies. When you sign in, IX uses essential session storage so that you stay signed in and your requests are authenticated. These are strictly necessary and do not need consent. If we add analytics or other optional cookies in future, we will ask for your consent first and update this policy.
6. Who we share personal data with
We share personal data only where needed and only with:
- Infrastructure and service providers (our sub-processors), such as our database provider Neon (Postgres database hosted in the UK, AWS London region), our web hosting provider, email delivery, and our payment provider once paid plans are available. They act on our instructions and are bound by contracts that require appropriate security and data protection.
- AI model providers. IX routes your requests to the AI model providers selected under your organisation's routing policy. The content of a request is sent to the provider chosen for that request so that it can be answered. Each provider handles that content under its own terms. See section 10.
- Professional advisers and insurers, such as lawyers, accountants and auditors, under duties of confidentiality.
- Authorities, where required by law.
- A buyer or investor, if we sell or restructure the business, with the same protections for your data.
A current list of our sub-processors is available on request at support@ix-platform.com.
7. International transfers
Our primary database is hosted in the UK. Some providers we use, including some AI model providers selected by a customer's routing policy, may process data outside the UK. Where personal data is sent outside the UK we rely on an adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another safeguard permitted by law.
8. How long we keep personal data
| Data | Retention |
|---|---|
| Enquiries and access requests that do not become a customer | [12 months] after our last contact |
| Account details | For as long as the account is active, then [12 months] after closure |
| Usage, cost and audit records linked to accounts | For the term of the contract and [6 years] afterwards for financial and legal records, unless the customer asks us to delete earlier and the law allows it |
| Server and security logs | [90 days] |
| Ask IX conversations | Until the user deletes the conversation, or the account is closed |
| Customer content processed on the customer's behalf | As set out in the customer's agreement with us (see section 10) |
9. Security
We protect personal data with measures that include hashed passwords, expiring session tokens, access limited by role, encrypted connections, and separation between customers' data. IX includes guardrails that detect when sensitive data such as email addresses or secrets appear in a request. These record the type and number of items found and do not store the sensitive text itself. No system is perfectly secure. If a personal data breach puts your rights at risk, we will tell the people and regulators affected as the law requires.
10. Customer content and the IX platform (where we are the processor)
When an organisation uses IX, it may submit prompts, documents and instructions, and receive model outputs. For these, the customer is the controller and we are its processor. We process this content only on the customer's documented instructions and to provide IX. In summary:
- What we store. For IX projects and runs started in the IX dashboard, prompts, source documents and results are stored so the customer can review them. For usage that comes through developer tools connected to IX (such as coding assistants), IX records usage metadata such as time, user, model, token counts, cost and security flags. [Please check your agreement for exactly what is stored for your integration.]
- Ask IX. Ask IX is the assistant inside the IX dashboard. When you ask a question, IX chooses the AI model provider to answer it, in the same way it routes other requests, and sends the provider your question, any documents you attach and, where needed, the IX usage data required to answer. The guardrail scans the question and documents first and records only the type and number of sensitive items found, not the text. Conversations are saved so you can return to them. Each conversation is visible only to the user who wrote it, and that user can delete it at any time. We save a record of attached documents (name, size and a fingerprint) but not their text. Answers are produced by AI and can be wrong, so check them before you rely on them. Please do not put personal data into Ask IX that your organisation does not need to use.
- Security flags. The guardrail system records the type and count of sensitive items it detects. It does not store, redact or block the text.
- Who receives it. The customer's content is sent to the AI model provider that handles the request and to the sub-processors in section 6. We do not use customer content to train models, and we do not sell it.
- Controls. Customers decide which model providers and policies are enabled, who can use IX, and what is entered into it.
- Our commitments. We will keep the content confidential, make sure only authorised people with a need to know can access it, use sub-processors only under written terms, help the customer respond to data subject requests, tell the customer without undue delay if we become aware of a personal data breach affecting its content, and delete or return the content at the end of the contract, as set out in our data processing agreement.
A data processing agreement is available to every customer. Please email support@ix-platform.com to request it.
11. Your rights
Under UK data protection law you have the right to:
- be told how your data is used (this policy);
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use it in certain circumstances;
- object to us using it, including for direct marketing, which you can do at any time;
- receive data you gave us in a portable format, where we use it on the basis of contract or consent and by automated means; and
- withdraw consent at any time, where we rely on it.
To use any of these rights, email support@ix-platform.com. We will respond within one month, and may ask you to verify your identity. There is no fee unless a request is clearly unfounded or excessive.
12. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the current version. If we make a significant change we will tell account holders directly.
14. Contact us
Future Cover Ltd t/a IX 128 City Road, London EC1V 2NX support@ix-platform.com