Privacy Policy

We take your privacy seriously. This policy explains what data we collect, why, and what you can do about it.

1. What we collect

• Account data: email, name, hashed password
• Content you create: funnels, blog posts, leads captured on your funnels
• Payment data: handled entirely by Stripe — we never see your card number
• Analytics: page views via Google Analytics 4 (anonymised IP)
• Cookies: a session cookie for login (no third-party tracking cookies)

2. Why we collect it

• To provide the service (host your funnels, send your nurture emails)
• To bill you correctly
• To improve the product (aggregate, anonymised analytics)
• To contact you about your account (transactional emails only — we don't spam)

3. Who we share it with

We use these third-party processors. Each is GDPR-compliant:

• Stripe — payment processing
• Resend — transactional email delivery
• Anthropic — AI text generation (your prompts are sent to generate funnel copy)
• Pollinations.ai — AI image generation
• Google Analytics — anonymised page-view tracking
• MongoDB Atlas — data hosting (EU region)

We don't sell your data. Ever.

4. Your rights under UK GDPR

• Access: request a copy of your data
• Correction: have us fix anything wrong
• Deletion: request full account + data deletion
• Portability: export your leads as CSV anytime from the dashboard
• Objection: opt out of any non-essential processing

To exercise any of these, email brian@paisleyscotland.com. We'll respond within 30 days.

5. Data retention

We keep your account data while your account is active. After you delete your account, we permanently wipe your data within 30 days, except where we're legally required to retain it (e.g. tax records).

6. Security

Passwords are bcrypt-hashed. Connections use HTTPS. API keys are stored encrypted at rest. We're not perfect — if you spot a security issue, please email us before going public and we'll thank you and fix it.

7. International transfers

Some of our processors (Anthropic, Stripe) may transfer data outside the UK/EEA. All have appropriate safeguards (SCCs or adequacy decisions) in place.

8. Cookies

We use one functional cookie (your login session) and Google Analytics (which uses anonymised IPs). We don't use marketing or advertising cookies.

9. Changes

If we make material changes to this policy, we'll email registered users at least 14 days before they take effect.

10. Data controller

PathExecute Ltd, Paisley, Scotland. ICO registration pending. Contact brian@paisleyscotland.com for any privacy queries.