Legal
Privacy
Last updated · April 2026
The plain-English version
Your uploaded material is confidential. We treat it as commercially sensitive and only the person running your case sees it.
We hold Diagnostic files for 7 days after delivery, then delete them. Readiness Build files stay for 30 days after the active case ends, then delete. You can ask us to delete anything earlier — just email.
We do not sell data. We do not train third-party models on your material.
What we collect
- The files you upload. Whatever you send through the upload form — tenders, past bids, policies, certificates, case studies, folders, zip archives.
- Your contact details. Name, email, and anything you share while we run your case.
- Basic site analytics. Pages visited, referrer, browser type. We use this to understand what's working on the site, not to profile you.
How we use it
Uploaded material is used solely to deliver the service you paid for — producing your Diagnostic file, or running your Readiness Build case. Contact details are used to deliver work, answer questions, and send a submission receipt.
We may use anonymised, non-identifying patterns across cases to improve our own methodology. We do not share identifiable client material with third parties.
Retention — how long we keep things
Diagnostic
7 days after delivery
Your uploaded files and our working notes are kept for 7 days after your Diagnostic is delivered, to support follow-up questions and a possible upgrade to Readiness Build. After that, they are permanently deleted.
Readiness Build
30 days after case ends
Files and case materials are held for the 30-day active case plus 30 days after the case formally ends, in case you need re-delivery or clarification. After that, they are permanently deleted.
The final deliverables we produce for you (your Diagnostic file, your Readiness Build outputs) are sent to you directly and are yours to keep. You don't rely on us to keep a copy for you.
Deletion on request
You can ask us to delete your uploaded files and our working notes at any time, including before the retention window above has elapsed. Email [email protected] with the subject line "Delete my case" and your case ID. We confirm deletion in writing within 5 working days.
Security
Uploads run over HTTPS. Files are stored in access-controlled infrastructure. Access is limited to the person running your case and the minimum technical systems required to run it.
Mighty Andy is a small operation. We do not have enterprise SOC 2 posture. If your material requires formal vendor-level assurances, tell us up front and we'll confirm honestly what we can and cannot offer.
What we don't do
- We don't sell your data.
- We don't hand uploaded material to third parties.
- We don't train external AI models on your files.
- We don't track you across the web.
Cookies
The site uses a minimal session cookie to support upload resumption if your connection drops mid-upload. No advertising or cross-site tracking cookies.
Your rights
You can ask us what we hold on you, ask us to correct it, or ask us to delete it. Email [email protected].
Contact
For data questions, deletion requests, or anything privacy-related: [email protected].