Last updated September 29, 2026

Reclamly Privacy Policy

Draft, needs lawyer review. This policy is a working draft (2026-09-29-draft) and is not in force until reviewed by a lawyer and published at launch.

Who we are

Reclamly is a consumer drafting and tracking tool that finds money you may be owed (flight delay compensation, refunds, forgotten subscriptions) from your email receipts and prepares claims you send yourself, with a success fee only when money arrives. It is operated by AO, a sole proprietorship operated by Dallas Mayne ("AO", "we"), in Alberta, Canada. We are the controller of your data. You send your own claims; for flight compensation we can also act as your payment agent if you sign a payment authorization (see Your money).

What we collect and why

Account: name, email and language	To run your account
Email receipts and travel emails we're allowed to read (read-only access you grant, or emails you forward)	To find refunds and compensation you may be owed
Claim details: booking references, flight numbers, amounts, airline or merchant replies and proof of payment	To prepare and track your claims
Outcome: how much you received and when	To charge the success fee and show your results

We don't sell personal information, we don't "share" it for cross-context behavioural advertising, and we don't use it for advertising. We don't make decisions with legal or similarly significant effects about you by automated means alone.

Legal bases (GDPR and UK GDPR)

Contract: to provide the service you signed up for.
Legitimate interests: security, fraud prevention, fixing errors and improving the service.
Consent: marketing emails and optional features you turn on (you can withdraw at any time).
Legal obligation: tax, accounting and responding to lawful requests.

Your email account

If you connect Gmail or Outlook we ask for read-only access, read only messages that look like receipts, bookings or subscriptions, and never send email from your account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from your settings or from your Google or Microsoft account.

Your money (client funds)

For flight compensation you can sign a payment authorization. Your claim letter then asks the airline to pay Reclamly's client funds account for you, as your payment agent. That account holds only travellers' money, kept separate from AO's own money and reconciled daily. When the money arrives we keep the disclosed fee and send you the rest automatically within 5 business days (bank deposit through Stripe, or Interac e-Transfer in Canada), with a receipt and an email at every step. We record the amounts, dates, your payout details and the payment reference to do this.

You can cancel the authorization any time before the airline pays. If the airline pays you directly instead, the same fee is charged to your saved card with 72 hours' notice.

Service providers

We use these providers to run Reclamly. Each is bound by a contract to protect the data and use it only for us:

Vercel (hosting, United States and Canada edge)
Supabase (database and sign-in, hosted in Canada: ca-central-1)
Resend (email delivery, United States)
Stripe (payments and billing; Stripe holds card numbers, we never see them)
OpenAI (AI text and speech processing, United States; API data isn't used to train their models) (reading receipts and drafting claim letters)
Google (Gmail API, only if you connect Gmail)
Microsoft (Outlook API, only if you connect Outlook)

Where your data is stored

Our main database is in Canada. Some providers process data in the United States or elsewhere, so it may be accessible to authorities there. For transfers of data about people in the EU or UK we rely on the European Commission's adequacy decision for Canada (commercial organisations under PIPEDA), and on Standard Contractual Clauses and the UK Addendum with our providers.

How long we keep it

Email content: we keep only the facts needed for a claim (not whole mailboxes); raw email text is discarded after it's read.
Claims, fee and client funds records (amounts, payouts, payment references): 7 years for tax and trust-accounting records.
Disconnecting your email revokes our access immediately.

Your rights

Everyone: ask to see, correct or delete your personal information, or ask how it's used. We answer within 30 days (Canada: PIPEDA and Alberta PIPA allow up to 45 days in some cases; we aim for 30).
Canada: you can complain to the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.
EU and UK: you also have the rights to restrict or object to processing, to data portability, and to complain to your local data protection authority (in the UK, the ICO).
California (CCPA/CPRA): you have the rights to know, delete and correct, to opt out of sale or sharing (we do neither), to limit use of sensitive personal information, and not to be treated differently for using these rights. An authorised agent can make a request for you.

To use any of these rights, email d.mayne@hotmail.com or use the contact form. We'll confirm your identity before we act.

Emails and texts (CASL)

We send service messages (receipts, security and account notices) because they're needed to run your account. We send marketing emails only with your consent, every one identifies AO and includes our mailing address and a one-click unsubscribe, and we act on an unsubscribe within 10 business days (usually straight away).

Cookies

We use only the cookies needed to sign you in, keep you secure and remember your language. No advertising or cross-site tracking cookies.

Children

Reclamly isn't for children. You must be 18 or older (or the age of majority where you live) to use it. We don't knowingly collect information from anyone under 16.

Security and breaches

Data is encrypted in transit and at rest, access is limited to the people who need it, and admin actions are logged. If a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner of Canada and the Alberta Information and Privacy Commissioner as the law requires (and EU/UK authorities within 72 hours where GDPR applies).

Changes

If we make a material change we'll email account holders and post the new version here before it takes effect.

Contact and Privacy Officer

Dallas Mayne (Privacy Officer)

AO, a sole proprietorship operated by Dallas Mayne
5509 Taylor Way
County of Grande Prairie No. 1, AB T8W 0H3
Canada
Email: d.mayne@hotmail.com · or use the contact form