People type real things into these planners — the conversation they are dreading, the person they cannot manage, the month that went wrong. That only works if it is clear where any of it goes.
This page is the operational detail. The privacy policy is the formal version; where they differ, the privacy policy governs.
The short answer
What you write in a planner stays on your own device unless you are signed in with a licence key. Nothing you type is read by a person, sold, or used to train anything.
What is collected, and when
What you type into a plannerSaved in your own browser. If you are signed in with a licence key, it also syncs to your account so it survives a lost device. Not readable by anyone else.
Buying somethingStripe takes the payment and holds the card details. This business sees your email address, what you bought, and nothing else. Card numbers never touch this site.
Your licenceYour email, which products the key opens, and how many devices have used it. That is the record that lets a key be reissued when you lose it.
The site assistantYour messages go to Anthropic's API to generate a reply. Not used to train models. Kept in server logs for thirty days for debugging, then gone.
Working with AI, inside a toolWhen you press a prompt button, the notes on that page are sent to generate the response. Same terms: not used for training, not retained beyond the request.
The newsletterOnly if you enter your address. One list, unsubscribe in every email.
AnalyticsAggregate page counts. No advertising pixels, no cross-site tracking, nothing sold.
Do not type anything into the site assistant that you would not put in an email. It is a signpost, not a confidential channel. The planners themselves are the private part.
Who else touches it
NetlifyHosting, the licence store and saved work · USA and EU · Standard Contractual Clauses
StripePayments and card data · UK/EU/USA · PCI DSS Level 1
AnthropicThe site assistant and the in-tool prompts · USA · not used for model training
ResendSending licence keys and receipts · EU/USA
Microsoft 365Email · UK/EU
That is the complete list. If it changes, this page changes and the date at the top moves.
How long things are kept
Your saved workUntil you delete it, or two years after a licence goes unused.
Licence recordsSix years, because they are records of a sale and tax rules require it.
Assistant conversationsThirty days in logs, then deleted.
Newsletter addressUntil you unsubscribe.
Your rights
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected or deleted, or object to it being held at all. Email smartproductsuite@outlook.com.
The legal deadline is thirty days. In practice it will be a couple of days, because this is a small business and there is not much to look through.
If you are unhappy with how a data question is handled, you can raise it with the Information Commissioner's Office at ico.org.uk.
If something goes wrong
If information is lost or exposed, affected customers are told within seventy-two hours of it being discovered — with what happened and what is being done, before the picture is complete rather than after.
Data controllerHelen Vernon, trading as SMART Productivity Planners