Privacy Policy

The data controller is SAVANNAH DP LIMITED, registered at 8 St. Congan's Circle St. Congan's Circle, AB53 4PY, Scotland. For any privacy request, contact support@savadp.shop or call +44 7589049831.

• Account data: email address and authentication identifiers when you create an account.
• The figures you enter: the invoice details, line items, amounts, client names, expense lists and revenue numbers you type or paste into the Studio, plus any brand name, colour or logo you add.
• Generated outputs: the documents, charts and reels produced from your figures.
• Subscription data: plan, billing cycle and payment status. Payment card details are entered on Stripe's hosted checkout — we never receive or store full card numbers.
• Support data: messages, name and email you send through our contact and support forms.
• Technical data: IP address, device and browser type, and basic usage events needed to run and secure the service.

We collect personal and business data from the following collection sources:

• Directly from you — when you register, type or paste figures and user input into the Studio, subscribe, or contact us.
• Automatically from your device — technical and usage data gathered via cookies and server logs as you use the service.
• From our payment processor — Stripe sends us limited billing status (such as whether a payment succeeded).
• From our other processors — hosting, email and storage providers return operational data (such as delivery status) needed to run the service.

We do not buy personal data or acquire it from third-party data brokers or advertising sources.

• To provide the service — format your figures, render documents/charts/reels and store your work (performance of a contract).
• To take payment and manage subscriptions (performance of a contract).
• To provide support and respond to your messages (legitimate interests / contract).
• To secure and improve the service, prevent abuse and debug (legitimate interests).
• To meet legal and accounting obligations such as keeping billing records (legal obligation).
• For optional analytics or communications where required, based on your consent, which you can withdraw at any time.

User input — the figures, text, files and sample data you type, paste or upload into the Studio — is processed only to format and visualise it for you. This user input is the source material the AI features format; it is stored on your account so you can return to your work.

Generated results — the documents, charts and reels produced from your user input — are stored so you can return to them and are deleted when you delete them or close your account.

Uploaded files and sample data are used only to render the output you asked for and are retained with the related work item, then removed on deletion.

We do not use your user input, uploads or generated results to train any AI model, and we never sell them.

Generated documents, charts and reels are stored so you can return to them, and are deleted when you delete them or close your account. If an external AI provider is configured to help caption a reel, only the minimal neutral text needed for that caption is sent, never your full client records; that provider processes it solely to return the caption and not for its own model training.

We share data only with processors that help us run the service, under contract:

• Hosting and delivery — our cloud hosting and content-delivery provider.
• Payments — Stripe, for checkout, subscriptions and receipts.
• Database and storage — our managed database and file-storage provider for accounts and saved work.
• Email — our transactional email provider for confirmations and support replies.
• AI captioning provider — only if configured, and only for the minimal caption text described above.

We do not sell your personal information. We may disclose data if required by law or to protect our rights.

We are based in the United Kingdom. Some processors may handle data outside the UK or EEA. Where they do, transfers are protected by appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses.

• Account and saved work: for the life of your account, then deleted on account closure or request.
• Billing and tax records: retained as long as required by law (typically several years).
• Support messages: kept only as long as needed to resolve and evidence the matter.
• Technical logs: kept for a short period for security and troubleshooting.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent at any time where processing is based on consent.

California residents have the right to know, delete and correct personal information and to not be discriminated against for exercising these rights. To exercise any right, email support@savadp.shop.

We do not sell or share your personal information for cross-context behavioural advertising, and we have not done so. There is therefore nothing to opt out of, but you may still contact us with any concern.

Payments are processed by Stripe on a hosted checkout page. Brightbill never sees or stores your full card number, CVC or expiry. We receive only limited status (such as whether a payment succeeded) needed to manage your subscription.

We use strictly necessary cookies to keep you signed in and to secure the service, and limited analytics to understand usage. See our Cookie Policy for details and choices.

We do not make legally significant decisions about you by automated means. Brightbill is not intended for children: it may not be used by anyone under 13, and users aged 13–17 must have verifiable parental or guardian consent.

We use encryption in transit, access controls and minimisation to protect your data. No method is perfectly secure, but we work to protect your information and will notify you and regulators of a qualifying breach as required by law.

Contact us first at support@savadp.shop. UK and EEA users may also complain to their data protection authority (in the UK, the Information Commissioner's Office). We may update this policy and will change the "last updated" date above when we do.