Privacy Policy

What we collect

Your email address, because it is how you sign in. There is no password, so we hold no password to lose.

What you create: business updates, writing samples, stories, your founder and voice profiles, and the ideas, drafts, scripts and shot lists generated from them.

Usage records: which AI actions you ran, when, and what they cost, so we can show your credit balance and run fair use limits.

Payment records once you subscribe: your subscription status and billing history. Card details go to Stripe and never reach our servers.

We do not run analytics, advertising pixels, session recording or third-party tracking of any kind. We do not ask for your phone number and we do not send marketing text messages.

Why we use it, and our lawful basis

To provide the service you signed up for, including generating content and keeping your account working. Lawful basis: performance of a contract with you.

To take payment and keep financial records. Lawful basis: contract, and legal obligation for tax and accounting records.

To keep the service secure, prevent abuse and enforce fair use limits. Lawful basis: our legitimate interest in a service that is not abused and does not run up unbounded costs.

To send you service emails such as sign-in links and billing notices. Lawful basis: contract. If we ever send marketing email we will ask for your consent first and every message will let you unsubscribe.

Your content and AI

When you generate something, the relevant parts of your content are sent to Anthropic, our AI provider, to produce the output. That is the only reason it leaves our systems.

Neither we nor Anthropic use your content to train AI models. We do not read your drafts except where you specifically ask us to help with a problem, or where we have to investigate a security or abuse issue.

Who processes your data

We use a small number of providers, each under a data processing agreement, and each only for the purpose listed:

• Supabase — database and authentication. Holds your account and everything you create.
• Anthropic — AI generation, as described above.
• Vercel — hosting and delivery of the application.
• Stripe — payment processing once you subscribe.

We do not sell your personal data and we do not share it for advertising. We may disclose data if the law requires it, or if the business is transferred, in which case we will tell you first.

Where your data goes

Our providers are based in or process data in the United States, so your data is transferred outside the UK. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on an adequacy decision such as the UK extension to the EU US Data Privacy Framework where the provider is certified.

Cookies

We set cookies only to keep you signed in. They are strictly necessary for the service to work, so there is no consent banner to click. We set no analytics or advertising cookies.

How long we keep it

Your account data and content are kept while your account is open. If you delete your account we delete your content within 30 days, apart from records we must keep for tax and accounting purposes, which we keep for six years as UK law requires.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw any consent you gave. Email cam@cam-james.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you raised it with us first so we can fix it.

Security

Your data is isolated at the database level so that your account can only ever read its own rows. Access to production systems is limited to those who need it. No system is perfectly secure, but we take this seriously and will tell you and the ICO without undue delay if a breach affects you.

Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly updating the page.