Privacy Policy

Last updated: March 2026

The Short Version

We collect only what we need to process your order and deliver your files. We do not sell your data. We do not run invasive tracking. We keep things simple.

What We Collect

When you make a purchase

• Email address (to send your download link)
• Payment information (processed entirely by Stripe; we never see or store your card details)
• Purchase history (which products you bought and when)

When you use the free AI tool

• The text you submit (sent to our AI provider to generate your plan; not stored after the response is returned)

Automatically

• Basic server logs (IP address, browser type, pages visited) — standard for any website and retained for 30 days

What We Do Not Collect

• We do not use Google Analytics or Facebook Pixel
• We use Google Ads conversion tracking (gtag) to measure the effectiveness of our advertising. This may set cookies to attribute website visits to ad clicks. You can opt out at Google Ad Settings.
• We do not run retargeting ads
• We do not sell or share your email with third parties
• We do not set tracking cookies beyond what is essential for the site to function

Third-Party Services (Data Processors)

• Stripe — processes payments. Their privacy policy: stripe.com/privacy
• Supabase — database and authentication. Their privacy policy: supabase.com/privacy
• Resend — sends transactional emails (your download link). Their privacy policy: resend.com/legal/privacy-policy
• Cloudflare — hosts our website and workers. Their privacy policy: cloudflare.com/privacypolicy
• OpenAI — powers the free AI tool (AI provider). Inputs are sent via API and not used for model training. Their privacy policy: openai.com/privacy

Lawful Basis for Processing

Under Article 6 of the UK GDPR, we rely on the following lawful bases:

• Purchase data (email, payment, order history) — contract performance. We need this data to fulfil your order and deliver your files.
• Email capture on free tools — legitimate interests (keeping you informed about relevant products). You can opt out at any time by clicking the unsubscribe link in any email or contacting us.
• Analytics and server logs — legitimate interests (understanding site usage and maintaining security).

Data Retention

• Purchase records — retained for 6 years after the transaction date, as required by HMRC for tax purposes.
• Analytics and server logs — retained for 90 days, then automatically deleted.
• Marketing leads (free tool email capture) — retained until you unsubscribe or request deletion.

Your Rights

Under UK data protection law, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct any inaccurate or incomplete data.
• Right to erasure — ask us to delete your personal data (subject to legal retention requirements).
• Right to restriction of processing — ask us to limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, email [email protected] and we will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes

If we make significant changes to this policy, we will update this page and the date above.

Contact

Questions? [email protected].