Privacy policy

Draft for review. Replace everything in [square brackets] and have this checked by a solicitor before you take payments.

Last updated [date]. [CircuitPT Ltd / your trading name], [registered address] ("we") is the data controller for the personal data described here. Contact: info@circuitpt.com.

What we collect

Your email address and password (stored by our sign-in provider, never in plain text); your plan and billing status; the devices (browsers) you sign in on; the data files you import and the notes you write; the numbers measured from each file in your library (such as lap times, corner speeds and brake points), which the AI uses to compare sessions; and a count of the AI debriefs and questions you use. Card details are collected and stored by Stripe, not by us.

How your files are used

Files are analysed in your browser. A compressed copy is stored in your private library so you can open it on your other devices. When you ask for an AI debrief or ask the AI a question, the numbers measured from your session (lap times, corner speeds, braking and throttle points), the same numbers from your earlier sessions at that track, and your notes from those days are sent to our AI provider to write the answer. Your raw log files are not sent.

Who processes data for us

Supabase (accounts, database and file storage, [region]); Stripe (payments); Vercel (website hosting); Anthropic (AI debriefs and questions). Each acts on our instructions under a data processing agreement. [List any others you add, such as an email provider.]

Why we use it

To provide the service you signed up for (contract), to take payment and keep records (legal obligation), and to keep the service secure and working (legitimate interests).

How long we keep it

For as long as you have an account. When you delete a session it is removed from storage. If you close your account we delete your files and notes within [30] days, and keep billing records for as long as tax law requires.

Cookies and storage

We only use storage that is needed for the service to work: keeping you signed in, remembering this device, and your display settings. We do not use advertising or tracking cookies.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing info@circuitpt.com. You can also complain to the Information Commissioner's Office (ico.org.uk).