Privacy Policy

Waddle AI is a social media content planning platform built for solo founders, freelancers, and small business owners. The service is operated by Lumivox Design, based in the United Kingdom. For the purposes of UK data protection law, Lumivox Design is the data controller.

Contact: hello@waddle.so

2.1 Account Information

When you register for Waddle AI, we collect:

• Your name and email address
• Your password (stored as a secure hash via Supabase, never in plain text)
• The date and time you created your account

2.2 Onboarding Questionnaire Data

To generate your personalised content plan, we ask you to complete a detailed onboarding questionnaire. This may include:

• Your business name, niche, and target audience
• The social media platforms you use
• Your content goals and subscription tier preferences
• Any additional context you choose to provide about your brand voice or offers

This information is used solely to generate your Waddle content plan and to improve the quality of that plan over time.

2.3 Content Plan and Performance Data

We store the content plans we generate for you, along with any performance data you choose to input or connect. This data is used to refine your monthly plan using the Waddle Method framework.

2.4 Billing Information

Payments are processed by Stripe. We do not store your card details at any point. Stripe handles all payment processing in accordance with PCI DSS standards. We receive a confirmation of your subscription status and transaction history from Stripe, but not your full payment details.

2.5 Technical and Usage Data

We may collect standard technical data when you use the platform, including:

• Your IP address and browser type
• Pages you visit and features you use within Waddle
• Device and operating system information
• Timestamps of activity

This data helps us understand how the platform is being used and to diagnose any technical issues.

We use your data for the following purposes:

• To create and maintain your Waddle AI account
• To generate your personalised 4-week content plan using the Waddle Method
• To improve your plan each month based on performance data
• To process your subscription payments via Stripe
• To send you service-related communications, such as plan generation notifications and account updates
• To provide customer support when you contact us
• To improve the Waddle platform and develop new features
• To comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes or share it with marketing companies.

Under UK GDPR, we rely on the following legal bases:

• Contract: Processing necessary to provide the Waddle service you have subscribed to
• Legitimate interests: Improving our platform, preventing fraud, and ensuring security
• Legal obligation: Complying with applicable law, including financial record-keeping requirements
• Consent: Where we have specifically asked for and received your consent, such as for optional marketing emails

We retain your account data for as long as your account remains active. If you cancel your subscription and request deletion of your account, we will delete your personal data within 30 days, except where we are legally required to retain certain records (for example, billing records, which we retain for 7 years in line with HMRC requirements).

Anonymised or aggregated data, which cannot be used to identify you, may be retained indefinitely for product improvement purposes.

We share your data only with the following categories of trusted third-party service providers, and only to the extent necessary to operate the platform:

• Supabase (database and authentication infrastructure)
• Stripe (payment processing)
• Anthropic (Claude API, used to generate your content plans)
• Lovable (platform infrastructure)

Each of these providers is subject to its own privacy policy and appropriate data processing agreements. We do not authorise any of these providers to use your data for their own purposes beyond what is necessary to provide services to us.

We may also disclose your data if required to do so by law, or in connection with legal proceedings or to protect the rights and safety of Waddle AI, its users, or others.

Some of our third-party providers process data outside the UK and European Economic Area. Where this is the case, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms, to protect your data.

Under UK data protection law, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can ask us to delete your personal data in certain circumstances
• Right to restriction: You can ask us to restrict how we use your data in certain circumstances
• Right to data portability: You can request your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests
• Rights relating to automated decision-making: You have the right not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at hello@waddle.so. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

We use cookies and similar technologies to operate the Waddle platform. Please see our Cookie Policy for full details of what we use and why.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include encrypted data storage via Supabase, HTTPS throughout the platform, and restricted access to production systems. However, no system is completely secure, and we cannot guarantee absolute security.

Waddle AI is intended for adults and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at hello@waddle.so and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, where the changes are significant, we will notify you by email. Your continued use of Waddle AI after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Email: hello@waddle.so

Website: waddle.so