Privacy Policy
Last updated: 27 March 2026 · Effective date: 27 March 2026
1. Who We Are
TownsHub Marketing AI is operated by TownsHub Limited ("TownsHub", "we", "us", "our"), a company registered in England and Wales. We are the data controller for personal data processed through the TownsHub Marketing AI platform accessible at townshub-app.vercel.app and any associated domains.
Contact us: privacy@townshub.com
2. What Data We Collect
We collect and process the following categories of personal data:
Account Data
Full name, email address, encrypted password, account creation date, and subscription plan.
Payment Data
Billing details processed by Stripe or PayPal. We do not store full card numbers — only payment provider customer IDs and subscription identifiers.
Usage Data
Content generation history, topics and prompts submitted, number of generations used, and feature interactions.
Technical Data
IP address, browser type and version, device type, operating system, referring URLs, and pages visited (collected via Google Analytics where consented).
Communications Data
Any messages you send to our support team and AI assistant chat history.
3. How We Use Your Data
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Provide and operate the service | Contract (Art. 6(1)(b)) |
| Process payments and manage subscriptions | Contract (Art. 6(1)(b)) |
| Send transactional emails (password reset, receipts) | Contract (Art. 6(1)(b)) |
| Respond to support enquiries | Legitimate interests (Art. 6(1)(f)) |
| Improve and develop the platform | Legitimate interests (Art. 6(1)(f)) |
| Analyse usage and site performance (Google Analytics) | Consent (Art. 6(1)(a)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Prevent fraud and ensure security | Legitimate interests (Art. 6(1)(f)) |
4. Third-Party Processors
We share data with the following trusted third-party processors who act on our instructions:
Supabase
Database, authentication, and file storage · EU (AWS eu-west-1)
Stripe
Payment processing · USA (SCCs apply)
PayPal
Payment processing · USA (SCCs apply)
Google Analytics
Website analytics (consent-gated) · USA (SCCs apply)
Vercel
Application hosting and edge network · USA/EU (SCCs apply)
OpenAI / n8n
AI content generation processing · USA (SCCs apply)
5. International Data Transfers
Some processors are based outside the UK/EEA. Where data is transferred to third countries (e.g. the USA), we rely on Standard Contractual Clauses (SCCs) approved by the UK ICO or the European Commission, or we transfer to countries with an adequacy decision. By using our service, you acknowledge these transfers.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Specifically:
- Account data: retained until account deletion, then deleted within 30 days.
- Payment records: retained for 7 years to comply with UK financial regulations.
- Usage/content data: retained for the duration of your account plus 12 months.
- Support communications: retained for 3 years after last interaction.
- Analytics data: retained per Google Analytics' default retention period (26 months).
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Restriction
Request we restrict processing of your data in certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent
Withdraw consent for analytics/marketing cookies at any time.
Right to Complain
Lodge a complaint with the ICO (ico.org.uk) if unsatisfied with our response.
To exercise any of these rights, email us at privacy@townshub.com. We will respond within 30 days. You can also delete your account directly from your Account Settings.
8. Cookies
We use essential cookies required for the service to function (authentication sessions) and optional analytics/marketing cookies which require your consent. You can manage your cookie preferences at any time via the cookie banner or by reading our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. If you discover a security vulnerability, please contact security@townshub.com.
10. Children
Our service is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@townshub.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice on the platform at least 14 days before taking effect. The "Last updated" date at the top of this page indicates when the policy was last revised.
12. Contact & Complaints
For any privacy-related queries or to exercise your rights:
TownsHub Limited
Email: privacy@townshub.com
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.