1. The short version
- We collect what is needed to run an account and produce your breakdowns, and nothing beyond it.
- What you type, and any photo you upload, are never used to train any model.
- We do not sell or share personal data for advertising. There is no advertising on this site.
- We never receive or store your card details.
- You can export or delete everything, at any time, without asking us.
2. What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Email address and password hash | To create and secure your account | Performance of a contract |
| Job descriptions you type, and any photo you attach | To produce your breakdown and let you return to it | Performance of a contract |
| Subscription status, plan and allowance usage | To provide the plan you pay for and to bill correctly | Performance of a contract |
| Records of your cancellation-right consents | To evidence what you agreed to at checkout | Legal obligation |
| Security and error logs, including IP address | To keep the service working and to prevent abuse | Legitimate interests — running a service safely |
| Optional analytics about which parts of the tool are used | To decide what to improve | Consent, given through the cookie banner |
Photographs are optional. The service works fully without one. Photographs containing people are not accepted and are rejected at upload.
3. What we do not do
- We do not use your content to train models. Your descriptions and photographs are processed to produce your result and are not added to any training set, ours or anyone else’s.
- We do not sell personal data, and we do not share it for cross-context behavioural advertising.
- We do not make automated decisions that produce legal or similarly significant effects about you.
- We do not build profiles of you for marketing.
4. Who processes data for us
We use a small number of providers, each under a written processing agreement:
- Application hosting and content delivery.
- Database, authentication and file storage.
- A payment processor, which handles card details directly and does not pass them to us.
- A transactional email provider, for account and billing messages.
- A model provider, used only to classify which entry in our job table your sentence refers to.
Providers act on our instructions only. Where a provider is asked to classify your sentence, the request is made under terms that prohibit using the content for training.
5. International transfers
Some providers process data outside the United Kingdom. Where they do, transfers are made under the UK International Data Transfer Agreement, or under the UK Addendum to the European Commission’s Standard Contractual Clauses, together with a transfer risk assessment. Where the EU GDPR applies, the Standard Contractual Clauses are used. You can ask us for details of the safeguards used for any particular transfer.
6. Payments and card security
Card details are entered on the payment processor’s own page over an encrypted connection and are never received, transmitted or stored by us. We hold only the subscription status and the last four digits and card brand supplied back to us for your reference. The processor is responsible for the security of card data and maintains the relevant payment industry certification.
7. How long we keep things
| Account and breakdowns | Until you delete them, or 12 months after the account is closed |
|---|---|
| Uploaded photographs | 30 days, then deleted automatically, unless you delete them sooner |
| Billing and consent records | Six years, because tax and consumer law require it |
| Security logs | 90 days |
8. Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have data erased, where we have no continuing reason to keep it;
- restrict or object to processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
Ask at support@ispinstallation.shop. We respond within one month. Exercising these rights is free and we will not treat you differently for doing so.
If you are in California
You have the right to know what personal information is collected and for what purpose, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined in the CCPA, so there is nothing to opt out of, but the request route above is open to you and we will not discriminate against you for using it.
9. Complaining
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner’s Office at any time:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint
If you are in the EU or the EEA you may instead complain to the supervisory authority in the country where you live.
10. Cookies
What we set, and how to change your mind, is on the Cookies page. Optional cookies are only set if you accept them, and the accept and reject buttons carry equal weight.
11. Children
The service is for adults. We do not knowingly collect data about anyone under 18. If we learn that we have, we delete it and close the account.
12. Changes
If we change this notice materially we will tell account holders by email before the change takes effect. The date at the top always reflects the current version.