Privacy policy

CreativeSoul is run by [Owner to confirm: registered business name]. [Owner to confirm: ICO registration number]

Contact us about privacy at [Owner to confirm: privacy contact email].

For your account (your name, email, password, workspace settings and billing), we are the controller.

For your clients’ information (the clients, leads, bookings, files, quotes and invoices you keep in your workspace), you are the controller and we are your processor. We only use it to run the service for you, under your instructions.

• Account details: name, email address, a scrambled (hashed) version of your password, two-step sign-in settings.
• Workspace content you add: business details, clients, leads, tasks, bookings, documents and files.
• Connected accounts you choose to link (Google, Stripe and others): we store access tokens encrypted, and the figures we read from them.
• Basic technical logs needed to keep the service secure and working (for example, sign-in attempts).

We don’t use advertising trackers or third-party analytics on the app.

• To provide the service you signed up for (contract).
• To keep accounts and data secure and prevent misuse (legitimate interests).
• To meet legal duties, such as keeping billing records (legal obligation).

Only the suppliers that run the service, under contracts that protect your data:

• Google Cloud (Firebase) for the database and file storage. [Owner to confirm: storage region, e.g. europe-west2 (London)]
• Vercel for hosting.
• Resend for sending emails.
• Stripe for payments (yours, and your clients’ card payments to you).
• OpenAI for the assistant, only when you use it. [Owner to confirm: data processing terms and retention settings]

Some suppliers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum.

Your workspace content stays until you delete it or close your workspace. When you delete a workspace, its records and files are removed straight away; backups roll off within [Owner to confirm: backup retention, e.g. 30 days]. Billing records are kept for six years for tax reasons.

You can see, correct, export or delete your data at any time. In the app: Settings → Your data lets you download everything and delete your workspace. You can also ask us to restrict or stop processing, or complain to the Information Commissioner’s Office (ico.org.uk).

If you’re a client of a business that uses CreativeSoul, please contact that business first: they control your information.

Passwords are hashed, two-step sign-in is available on every account, connection tokens are encrypted, each business’s data is kept separate, and everything travels over HTTPS.

We use only the cookies needed to keep you signed in and remember your light or dark choice. No advertising or tracking cookies, so there’s no cookie banner to dismiss.