Privacy Policy

This policy explains what we collect, why, and what you can do about it. We act as the data controller for your account data.

1. What we collect

Account data: name, email, password hash, and sign-in metadata. Business data: brand details, websites, uploaded logos, briefs, posts and designs you create. Billing data: plan, credit balance and payment events. Card details are handled by Stripe and never reach our servers. Technical data: basic logs needed to run and secure the service.

2. Why we use it

To provide the platform, generate the content you ask for, take payment, prevent abuse, support you, and improve the product. Our legal bases are contract performance, legitimate interests (security and product improvement), and consent where required.

3. AI processing

Prompts and brand context you submit are sent to AI model providers so they can generate your output. We do not sell your data, and we do not use your private brand data to train public models.

4. Who we share it with

Only processors needed to run the service: our cloud and database host, AI model providers, our web research provider, and Stripe for payments. Each is bound by contract to protect your data.

5. International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on approved safeguards such as standard contractual clauses.

6. How long we keep it

Account and content data is kept while your account is open, then deleted or anonymised within 90 days of closure. Billing records are kept for six years to meet tax law.

7. Your rights

Under UK GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Email privacy@mktg2026.com and we will respond within one month. You can also complain to the Information Commissioner's Office.

8. Security

Data is encrypted in transit, access to your records is enforced at the database level so one account cannot read another's data, and payment secrets are stored in a managed secret store.

9. Cookies and storage

We use only what the app needs: a sign-in token and local drafts stored in your browser. No advertising trackers.

10. Children

The platform is for business use and is not intended for anyone under 18.

11. Changes

We will post updates here with a new date above, and tell you about material changes by email.