Privacy Policy

Last updated: [DATE] · DRAFT

⚠️ Draft template — not legal advice. Review with a qualified adviser (UK GDPR / data protection) and complete every [bracketed] field. As a UK business handling personal data you will likely need to register with the ICO and pay the data-protection fee, and name a real controller and contact.

This policy explains how [LEGAL ENTITY / TRADER NAME] ("myAIshows", "we", "us"), the data controller, collects and uses your personal data when you use myAIshows (the "Service"). For any data question, contact [CONTACT EMAIL].

1. What we collect

Data	Why
Name & email address	To create your account and deliver your show by email.
Your segment & custom-feed selections	To assemble your personalised show.
Subscription & billing status	To manage your plan, trials, renewals, and cancellations. Card details are handled by Stripe — we never see or store your card number.
Basic technical/usage data	Standard server logs (e.g. IP address) for security and reliability, via our hosting provider.

2. How we use it & our legal basis (UK GDPR)

Performance of a contract — to provide, personalise, and deliver the Service you subscribed to, and handle billing and support.
Legitimate interests — to keep the Service secure, prevent abuse, and improve it (balanced against your rights).
Legal obligation — to keep records required by law (e.g. tax).
Consent — where we ask for it (e.g. any optional marketing). You can withdraw consent at any time.

We do not sell your personal data.

3. Who we share it with (processors)

We share the minimum necessary with service providers who process data on our behalf under contract:

Provider	Purpose
Stripe	Payments & subscription billing
Cloudflare	Website hosting, database, and email routing
Resend	Sending your show & account emails
AI & search providers [e.g. Anthropic, ElevenLabs, Tavily]	Generating the show's text, voice, and news lookups (your name/email are not needed for this)

Some providers are based outside the UK/EEA (e.g. the US); where they are, transfers are protected by appropriate safeguards such as Standard Contractual Practices and provider data-protection commitments.

4. How long we keep it

We keep your account data while your subscription is active and for a reasonable period afterward to meet legal, accounting, and dispute-handling needs, then delete or anonymise it. Backups are rotated on a regular schedule.

5. Your rights

Under UK GDPR you can ask to: access a copy of your data; correct it; delete it ("right to erasure"); restrict or object to processing; and receive a portable copy. To exercise any right, email [CONTACT EMAIL] — we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk.

6. Cookies

The site uses only what is necessary to function and to process payments securely; it does not use advertising or cross-site tracking cookies. [Update this if you add analytics.]

7. Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit, signed/expiring account links, restricted access, and routed payments via Stripe. No system is perfectly secure, but we work to keep your data safe.

8. Children

The Service is for adults (18+) and not directed at children. We do not knowingly collect data from minors.

9. Changes

We may update this policy; material changes will be notified by email or on the site, with the "last updated" date revised.

10. Contact

Data controller: [LEGAL ENTITY / TRADER NAME], [ADDRESS]. Email: [CONTACT EMAIL]. ICO registration: [REGISTRATION NUMBER once obtained].