Privacy policy
What we collect, why we collect it, and what we will never do with it.
What we collect
- Account details — your name, email address and, if you provide it, your company. Needed to give you an account and to contact you about your engagements.
- Engagement material — the requests you write, anything you attach or paste into them, and the messages in your engagement threads.
- Payment records — the amount, date and reference for each engagement. Card details are handled entirely by our payment provider and never reach our systems.
- Operational records — sign-in events, source addresses and privileged actions, kept to secure the platform and investigate problems.
What we do with it
We use your information to carry out your engagements, to keep your account secure, to process payment, and to contact you about work you have asked for. That is the complete list.
What we never do
- We do not sell your information, to anyone, for any purpose.
- We do not use your material to serve another client.
- We do not publish your name, your organisation, or your engagements.
- We do not send marketing you did not ask for.
Who processes it
We rely on a small number of specialist providers: managed hosting and database infrastructure, a payment processor, an email delivery service, and the model providers that support our production work. Each receives only what its function requires and none is permitted to use your material for its own purposes.
How long we keep it
Engagement material is retained for as long as your engagement and its revision window require. Account details are retained while your account is open. A minimal financial record is retained where law requires it. Everything else is removed.
How it is protected
Information is encrypted in transit and at rest. Access to any record is decided by identity and enforced at the data layer. Credential attempts are rate limited, privileged actions are recorded against the account that performed them, and administrative tooling is separated from the customer application.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to remove it and close your account. There is no retention period we will hold you to. Ask through our contact page; we do not require a reason.
Cookies
We set the cookies required to keep you signed in. We do not use advertising cookies or third-party tracking.
Changes
Where we change this policy materially, we will tell account holders rather than quietly updating the page.
Contact
Privacy questions and requests go through our contact page and are answered by a person.