Privacy Policy
Last updated: 12 August 2026
1. Who We Are
This website is operated by [Your Company Name] ('we', 'us', 'our'). We are the data controller for the personal information collected through this service. Contact us at [your@email.com] with any privacy questions.
2. What We Collect
We collect your name, email address, and encrypted password when you register. If you sign in via Google, we receive your name and email from that provider. When you subscribe, Stripe processes your payment details — we only store a Stripe customer ID and subscription status, never your raw card number.
3. How We Use Your Data
We use your data to provide and maintain your account, process payments, send account-related emails (e.g. email verification, password reset), and — where you have opted in — send marketing communications. We do not sell your data to third parties.
4. Legal Basis for Processing
We process your data on the basis of: contract (to deliver the service you signed up for), legitimate interests (security, fraud prevention, service improvement), consent (marketing emails — you can withdraw at any time in account settings), and legal obligation (e.g. financial records).
5. Third-Party Services
We use Stripe for payments, Google OAuth for optional sign-in, a transactional email provider for system emails, and PostHog for cookieless analytics. PostHog operates in a cookieless, non-persistent mode — no cookies or device identifiers are stored. These providers process data under their own privacy policies and, where required, under data processing agreements with us.
6. Data Retention
We retain your account data for as long as your account is active, plus a short period afterwards to handle any disputes. You may delete your account at any time from your account settings, which permanently removes your personal data.
7. Your Rights
Under UK/EU GDPR you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
8. Cookies and Analytics
We use one strictly-necessary session cookie to keep you logged in. We do not use tracking or advertising cookies. Our analytics tool (PostHog) operates in cookieless mode — it does not store cookies or persistent identifiers on your device. An analytics notice is shown on your first visit for transparency.
9. Changes to This Policy
We may update this policy from time to time. We will notify you by email or via a notice in your account if the changes are material.