Privacy & GDPR Policy

Last updated: March 2026

Data controller

GoMediation.ai is a trading name / division of My Best Solutions Limited, a company registered in England and Wales (Company Number 14243668). My Best Solutions Limited is registered with the Information Commissioner's Office (ICO) under Registration Number ZB623638.

For all data and privacy matters, please contact us at hello@gomediation.ai.

Data security

• All conversations are encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Data is stored in UK/EU data centres operated by our infrastructure provider.
• Your mediation data is never used to train AI models. AI processing happens in real time under enterprise terms that exclude training on your content.

How AI is used

• Message filtering — before a message is delivered, it is sent to an AI model that rewrites hostile or inflammatory wording. You always see and approve the rewritten version before it is sent.
• AI mediator — when you invite the mediator to respond, recent messages from that conversation are sent to the model to generate a reply.
• Private chats stay private — your private conversation with the AI mediator is never shown to the other party and is never included in the shared room's AI context. Nothing moves from a private chat into the shared room unless you ask for it.
• Agreement drafting — agreed issues and their notes are sent to the model to draft your Memorandum of Understanding.
• Human review — AI output is not reviewed by our staff as a matter of course. We may access room content only where necessary to investigate a safety report, a technical fault, or a legal obligation.
• AI providers process this content as our sub-processors under contract and do not use it to train their models. They may hold it briefly (typically up to 30 days) for abuse monitoring before deletion.

Data retention

• Mediation rooms and their contents are automatically deleted after 12 months from the date the room is completed, unless you choose to keep them.
• Signed agreements and payment records are kept for 6 years where we are required to do so for tax, accounting and legal-claim purposes.
• You can request deletion of your data at any time by contacting us at hello@gomediation.ai.
• Deletion requests are processed within 30 days in accordance with GDPR requirements.

Your rights under GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate personal data.
• Erasure — request deletion of your personal data.
• Restriction — restrict processing of your data in certain circumstances.
• Portability — receive your data in a portable format.
• Object — object to processing based on legitimate interests.

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

What we collect

• Account information — name, email address.
• Mediation content — messages, issues, and agreements created within rooms.
• Payment information — processed securely by Stripe; we do not store card details.

Third-party processors

• Infrastructure provider — hosting and database services (UK/EU).
• Anthropic — the AI mediator and agreement drafting. Content is not used for training.
• Google (Gemini) — message filtering and translation. Content is not used for training.
• Resend — transactional and invitation emails.
• Stripe — payment processing.

Contact

For any privacy-related questions or to exercise your rights, please contact us at hello@gomediation.ai.