Privacy Notice

This Privacy Notice explains how Donna McNiel, Art and Resistance ("we", "us") collects, uses, and protects your personal data when you use The Selling Studio. We act as the data controller for the personal data described below.

1. Data we collect

• Account data: email address, login credentials.
• Content you submit: descriptions of your art and other information you enter into the tool to generate copy.
• Generated outputs: the marketing copy produced for you.
• Usage data: request counts, timestamps, basic device and browser information, IP address.
• Support messages: anything you send us when contacting support.

2. Why we use it

• To create and secure your account (legal basis: performance of contract).
• To generate marketing copy using AI models (performance of contract).
• To enforce usage limits and prevent abuse (legitimate interest).
• To provide customer support (performance of contract).
• To improve and maintain the Service (legitimate interest).
• To comply with legal obligations (legal obligation).

3. Who we share data with

• Paddle — our Merchant of Record. Paddle processes your purchase, subscription management, payments, tax compliance, and invoicing. See Paddle's Privacy Notice.
• AI model providers — the text you submit and the generated output are processed by AI providers (via the Lovable AI Gateway) to produce your copy.
• Hosting & infrastructure providers — for database, authentication, and application hosting.
• Professional advisers — legal and accounting where necessary.
• Authorities — where required by law.

4. How long we keep it

We keep account and purchase records for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. When data is no longer needed, we delete or anonymise it.

5. Your rights

Depending on your country, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing or withdraw consent. If you're in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below; we'll respond within one month.

6. International transfers

Some of our providers may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure authentication. No system is perfectly secure, but we take this responsibility seriously.

8. Cookies

We use only essential cookies and local storage required to keep you signed in and to operate the Service. We do not currently use analytics or advertising cookies.

9. Contact

For privacy questions or to exercise your rights, contact us via the details listed on our site. See also our Terms & Conditions.