Privacy Policy

1. Who We Are

2. What Data We Collect

We collect the following categories of personal data when you register for and use the Service:

Information you provide directly:

• Full name and email address
• Profile photo (optional)
• Website URL and social media profile links
• Brand colours and business link URLs
• Your speaking topic, target audience, and professional biography
• Documents, articles, and other content you upload to inform AI generation
• LinkedIn URL (optional)

Information generated through your use of the Service:

• AI-generated blog posts created in your name
• Session data and authentication tokens
• Login activity and access logs
• Your subdomain and blog configuration settings

Payment information:

We do not store your payment card details. Payment processing is handled securely by Stripe, Inc. Please refer to Stripe's Privacy Policy at stripe.com/privacy for information on how they handle your payment data.

3. How We Use Your Data

• To provide and operate the Service, including generating and publishing your blog content
• To create and manage your speaker account and dashboard
• To send you login links and service-related communications via email
• To conduct limited promotional activity on your behalf as described in our Terms and Conditions
• To improve and develop the Service
• To comply with legal obligations

4. Lawful Basis for Processing

• Contract: Processing your name, email, profile data and content is necessary to provide the Service you have signed up for.
• Legitimate interests: We may use your name and blog content for limited promotional purposes, as it is in our legitimate interest to promote the Service. You can opt out at any time.
• Legal obligation: We may process data where required to comply with applicable law.

5. How We Share Your Data

We do not sell your personal data. We may share your data with the following third-party service providers solely to operate the Service:

• OpenAI (openai.com) — for AI content generation. Your profile data and topic information is sent to OpenAI's API to generate blog posts on your behalf.
• Stripe, Inc. (stripe.com) — for payment processing.
• Resend (resend.com) — for sending transactional emails including login links.
• Replit (replit.com) — for hosting and infrastructure.
• Neon (neon.tech) — for database storage.

All third-party providers are required to handle your data securely and in accordance with applicable data protection law. We do not share your data with any other third parties without your consent.

6. Data Retention

We retain your personal data for as long as your account is active. If you cancel your subscription or your account is closed:

• Your blog and associated content may be deleted within 30 days of account closure.
• We may retain certain data for up to 6 years where required for legal or financial record-keeping purposes.
• Login and access logs are retained for up to 90 days.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data in certain circumstances.
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can ask for your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests, including promotional use.

To exercise any of these rights, please contact us at dan@greatmarketingworks.co.uk. We will respond within 30 days.

8. Cookies and Tracking

SpeakerBlog uses session cookies to keep you logged in to your dashboard. These cookies are:

• Strictly necessary for the Service to function
• Not used for advertising or tracking purposes
• Deleted when you log out or your session expires

We do not use analytics cookies, advertising cookies, or any third-party tracking technologies at this time.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted HTTPS connections for all data in transit
• Secure, hashed storage of authentication credentials
• Time-limited, single-use login tokens
• Access controls limiting data access to authorised personnel only

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

10. International Transfers

Some of our third-party service providers (including OpenAI, Stripe, Resend, Replit and Neon) are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including reliance on providers who are certified under recognised transfer mechanisms or adequacy decisions.

11. Children

The Service is intended for professional speakers and business users. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. The effective date at the top of this policy will be updated accordingly. Your continued use of the Service after notification constitutes your acceptance of the revised policy.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

14. Contact Us