Legal
Privacy policy
Who we are
Themespot is run by Your Web Consultant Ltd, in the UK. Contact us at hello@themespot.app.
What we collect
- Account: name, email, password hash.
- Portal: OAuth tokens (encrypted), the site mirror, files metadata, scan results and screenshots of public pages, chat history, the approval journal.
- Billing: handled by Stripe; we store customer and subscription ids only.
- Usage: error and performance telemetry.
Why
To run the service, to bill, to secure it and to improve it.
Lawful basis
Contract, legitimate interest, and consent for marketing email.
AI processing
Content is sent to model providers to fulfil your requests. It is not used to train their models under our agreements. The providers are listed below.
Subprocessors
Anthropic, OpenRouter, Stripe, DigitalOcean (EU), Cloudflare, Sentry, HubSpot.
Retention
Your account for its life; portal data for the life of the connection plus 30 days; backups for 30 days.
Your rights
Access, correction, deletion, portability, and the right to complain to the ICO.
Cookies
Essential only on the app. The marketing site uses HubSpot’s cookie banner.
Changes
We will post changes to this policy on this page.