How Owed handles your data

Who we are

Owed is operated by Speight Solutions Ltd. Owed is an independent service and is not affiliated with, endorsed by, or acting on behalf of Great Western Railway. For any question about this notice or your data, contact [email protected].

What Owed does

Owed finds Great Western Railway (GWR) journeys in your email inbox (currently Gmail only), checks each one against GWR's own Delay Repay compensation rules, and — once you've connected your inbox — files eligible claims on your behalf. Every live submission to GWR is currently reviewed and actioned by a person on our side before it happens; nothing is submitted fully automatically today.

Inbox access

When you connect your inbox, Owed requests Google's gmail.readonly scope — read-only access. We never send, delete, modify, or otherwise change anything in your inbox; the application has no code path that can do any of those things. We search for and read only the specific emails likely to be GWR booking confirmations, e-tickets, or disruption notices (a targeted search, not a download of your entire inbox), and only look back as far as GWR's own 28-day claim window normally requires.

You can disconnect inbox access at any time from your account. Doing so revokes the connection with Google directly and stops any further scanning immediately.

Automated and AI-assisted processing

Owed uses OpenAI's API to read the content of individual emails we've found and extract structured journey details (route, date, delay, fare) from them — one email at a time, not your whole inbox at once. This extraction only ever identifies what an email appears to say; it never makes the final decision on whether a claim is eligible or how much compensation is due. That decision is made by fixed, deterministic rules based on GWR's own published Delay Repay policy, not by the AI model.

What we store, and for how long

We store the content of emails relevant to a journey for as long as a claim connected to it is active. Once a claim reaches a final outcome (paid, or a rejection you've confirmed as final), the underlying email content is deleted — we keep a record that the claim happened (route, amounts, dates, outcome), not the original message text. Emails we find that turn out not to relate to any journey have their content removed as well, keeping only enough to avoid processing the same email twice.

Bank details you provide for payout are stored as encrypted secrets, not as plain text in our database.

Other passengers mentioned in your emails

Some emails in your inbox may mention other people (a travelling companion, a correspondent). We only ever use this content to establish facts about your own journey and claim — we do not use it to build any profile of anyone else, and connecting your inbox doesn't grant Owed any separate consent on another person's behalf.

Analytics and tracking

This site does not currently use any analytics, advertising, or tracking cookies. If that changes, this notice and the site itself will be updated to ask for consent first, with a clear way to decline.

Marketing emails

Joining the beta waitlist on our homepage only ever results in an email once your spot opens up — we do not currently send any other marketing communications. If that changes, it will always be a separate, clearly optional choice, never required to use the service.

Account deletion

You can request account deletion by contacting us. Deleting your account anonymises your profile and real bank details and permanently revokes inbox access — we keep the underlying claim records themselves (what was claimed, for how much, and the outcome), the same way any business keeps its financial/transaction records after a customer leaves.

Your rights

Under UK data protection law you have rights including access to your data, correction, deletion, and objection to certain processing. Contact [email protected] for any of these, or to raise a concern directly. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).