Privacy Policy

The data controller is CASSANDRA WARRICK LIMITED, 8 South Rise, Carshalton Beeches, Surrey, SM5 4PD, England. For any privacy question or request, contact support@casswarr.shop or call +44 7183322848.

• —Contact information and account data: name, email address, phone number if provided, and authentication identifiers.
• —Subscription and billing data: plan, billing status, and the last four digits and card brand as returned by our payment processor. We never receive or store your full card number.
• —Tool inputs: the decision descriptions, business context, constraints and notes you enter into the console.
• —Generated outputs: the reframes, options, frameworks, plans, canvases and reels produced from your inputs.
• —Support data: messages, contact-form submissions and correspondence.
• —Technical data: IP address, device and browser type, and basic usage/analytics events.

• —Directly from you when you register, subscribe, use the console or contact support.
• —Automatically from your device via cookies and similar technologies (see our Cookie Policy).
• —From our payment processor (Stripe) regarding subscription and payment status.

• —To provide the service and generate your outputs — performance of a contract.
• —To take payment and manage subscriptions — performance of a contract.
• —To provide support and respond to enquiries — legitimate interests and/or contract.
• —To secure, maintain and improve the service — legitimate interests.
• —To send service and, where permitted, marketing messages — legitimate interests or consent, which you may withdraw at any time.
• —To meet legal, tax and accounting obligations — legal obligation.

Payments are processed by Stripe. Card details are entered on Stripe-hosted checkout and are handled under Stripe’s PCI-DSS environment. Warrick does not receive, process or store your full card number, CVC or full card details. We only see limited metadata such as card brand, last four digits and payment status.

• —This is an online-only digital AI service with no physical goods, shipping, fulfilment or on-site services.
• —Your console inputs are used to generate your results and to operate the service you requested.
• —Your user input is processed only for the current decision workspace, support and subscription recordkeeping.
• —Generated outputs are stored so you can revisit and export them.
• —Any files or example data you submit are processed only to produce your result and are cached for a limited period, then cleared (default 30 days) unless you save the workspace.
• —We do not use your inputs, uploads or outputs to train AI models.
• —You can request deletion of your inputs and outputs at any time (see Your rights).

We share personal data only with service providers acting on our instructions:

• —Hosting and delivery: our cloud hosting and CDN provider (Vercel).
• —Payments: Stripe, for checkout, subscriptions and billing.
• —Database and storage: Supabase, for account, workspace and support records.
• —Email: our transactional email provider, for receipts and support replies.
• —AI provider processing: where a live model is used to augment a reframe, only the minimal necessary text is sent to that AI provider under a data-processing agreement.

We do not sell your personal data. We do not share it for cross-context behavioural advertising.

We are based in England and may process data in the United Kingdom, the European Economic Area and the United States. Where data leaves the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum) as appropriate.

• —Account and subscription records: for the life of your account and up to 6 years afterwards to meet tax and accounting obligations.
• —Tool inputs, uploads and outputs: cached and cleared on a rolling basis (default 30 days) unless saved to your workspace.
• —Support correspondence: up to 24 months.
• —Analytics data: in aggregated or de-identified form where possible.

We use encryption in transit, access controls, least-privilege practices and reputable processors. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data and will notify you and regulators of a qualifying breach as required by law.

• —Access a copy of your personal data.
• —Rectify inaccurate data.
• —Erase data (right to be forgotten) where applicable.
• —Restrict or object to certain processing.
• —Data portability.
• —Withdraw consent at any time where processing relies on consent.
• —For California residents: the right to know, delete and correct, and to opt out of sale or sharing — we do not sell or share personal data as defined by the CCPA.
• —The right not to be discriminated against for exercising your rights.

To exercise any right, email support@casswarr.shop. We respond within the timeframes required by law.

Warrick does not sell your personal data and does not share it for cross-context behavioural advertising. There is therefore no sale or share for you to opt out of; you may still contact us to confirm this at any time.

We use strictly necessary cookies to run the service and limited analytics to understand usage. See our Cookie Policy for detail and choices.

Warrick generates suggestions, but it does not make legally significant automated decisions about you; you remain in control of your choices. The service is not directed to children: it is not for anyone under 13, and users aged 13–17 must have verifiable parental or guardian consent.

Contact us first at support@casswarr.shop. If you are in the UK you may also complain to the Information Commissioner’s Office (ICO); if you are in the EEA, to your national data protection supervisory authority.