Privacy Policy

Last updated: 4 April 2026

1. Data Controller

The data controller for MoneyShield is Thrivexa Technologies Ltd, a company registered in England and Wales. For any data protection enquiries, please contact us at premkumar@thrivexa.com.

2. Information We Collect

We collect the following categories of personal data:

  • Flight claim data: Flight number, date of travel, departure and arrival airports, delay/cancellation information, passenger name, email address, and booking reference.
  • Car finance claim data: Vehicle details, finance agreement information, lender name, approximate dates and amounts, and contact details.
  • Account data: Name, email address, and hashed password if you create an account.
  • Communication data: Messages sent through our contact form or via email.
  • Usage data: IP address, browser type, pages visited, and session duration collected via cookies.

3. How We Use Your Data

  • To check your eligibility for flight compensation or car finance claims.
  • To generate and submit claim letters to airlines or financial institutions on your behalf.
  • To communicate with you about your claim status via email.
  • To process payments for our success fee via Stripe.
  • To improve our services using anonymised, aggregated analytics.

4. Legal Basis for Processing

We process your data under the following legal bases (GDPR Article 6):

  • Contract: Processing is necessary to perform our claims service as agreed with you.
  • Legitimate interest: To improve our service and detect fraud.
  • Consent: Where you opt in to marketing communications.

5. Third-Party Services

We share data with the following third-party processors, all of which maintain appropriate data protection safeguards:

  • AviationStack: Flight status and delay data lookup. We send flight numbers and dates; no personal passenger data is shared.
  • Stripe: Payment processing for success fees. Stripe processes your payment card details directly under their own privacy policy.
  • OpenRouter: AI language model API used to generate claim letters. Claim details are sent for letter generation; data is not retained by OpenRouter beyond the API call.

6. Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies (such as anonymised usage statistics) to improve our service. You can manage cookie preferences through your browser settings. No advertising or tracking cookies are used.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Claim data is retained for up to 7 years to comply with legal and regulatory requirements. You may request earlier deletion subject to our legal obligations.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure: Request deletion of your data where there is no compelling reason to continue processing.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw at any time.

To exercise any of these rights, contact us at premkumar@thrivexa.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords (bcrypt), and access controls. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of MoneyShield after changes constitutes acceptance.

11. Contact & Complaints

For questions or complaints about this policy, contact premkumar@thrivexa.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.