Privacy policy
This policy is a working draft. The legal entity, data controller details and contact address are pending and are marked as such rather than invented.
What we collect
Your account identity, which comes from the sign in method you choose. The brief you submit, including company, market and financial context. Any logo or brand material you upload. Purchase and credit records. Operational logs recording which actions occurred and when.
Why we collect it
To authenticate you, to generate and store your strategy, to produce your exports, to process payments and credits, and to keep an accurate record of account activity for support and security.
Who can see your data
You can see your own strategies. Nobody else can, and access rules are enforced by the database itself rather than by the interface. Administrators can see account and purchase records needed to run the service, and every privileged action is recorded in an audit log.
Processors we rely on
Authentication, database, file storage and background processing are provided by our hosting platform. To write your strategy, your brief answers and public website content are processed by Google Gemini and OpenAI models, and by Parallel and Firecrawl for web research and website reading. We do not state retention terms on their behalf. Payment processing and transactional email will be listed here as each connection goes live.
How long it is kept
Strategies, briefs and uploads are kept while your account is open. Purchase records are kept for the period required by financial and tax law. Operational logs are kept for a limited period for security and support.
Deleting your data
From the account page you can download a copy of everything held about you, and permanently delete your account after confirming your password or signing in again. Deletion stops any work in progress and removes your strategies, briefs, modules, slides, website analyses, brand settings and uploaded logos. Credit purchases, credit history and the audit record are kept as required by law and for security, detached from your email address. Retention periods for these records are pending review.
Contact
A verified privacy contact address will be published here once the sending domain is configured.