Privacy & cookies

Clear evidence. Clear data choices.

Last updated 14 July 2026

design.live is the controller of the personal information described here. Questions or rights requests can be sent to isaacherringwork@gmail.com.

What we collect

• Account and contact information you provide, such as your email address.
• Subscription and transaction information from Stripe, including plan, payment status, amounts, currency, customer and subscription identifiers. We do not receive your full card number.
• Product activity needed to provide and secure design.live, such as MCP connection, evidence-task and support events.
• If you allow optional analytics: page path, referrer, UTM campaign fields, advertising click identifiers, consent choice, and conversion events.
• Technical and security information supplied by our hosting and infrastructure providers, such as request time, device/browser data, and network identifiers.

Why we use it

• To provide the service, open Checkout, manage subscriptions, and respond to support under our contract with you.
• To protect the service, prevent abuse, maintain records, and improve reliability based on our legitimate interests.
• To measure campaigns, build retargeting audiences, and report purchases to advertising platforms only when you consent to optional analytics and advertising technology.
• To meet tax, accounting, legal, and regulatory obligations where required.

Cookies and advertising technology

Essential storage remembers your privacy choice and first-touch attribution needed for Checkout reconciliation. Optional Google, Meta, and LinkedIn tags remain unloaded unless you choose “Allow analytics.” When allowed, those providers may set or read identifiers and receive page, campaign, or purchase events under their own notices.

You can withdraw consent at any time. This stops optional tags from loading on the next page load and does not affect the lawfulness of earlier processing.

Who receives information

We use service providers for payments (Stripe), database and authentication infrastructure (Supabase), hosting/content delivery, support, and—only with consent—campaign measurement (Google, Meta, and LinkedIn). We do not sell personal information. Providers may process information outside the UK; where required, transfers are covered by applicable adequacy decisions or contractual safeguards. Contact us for details relevant to your information.

How long we keep it

We keep account, subscription, and transaction records while your account is active and afterwards for the periods needed for tax, accounting, disputes, and legal obligations. Campaign and product events are kept only while needed to measure acquisition, operate the service, and establish aggregated trends, then deleted or anonymised. Support records are kept for as long as needed to resolve the request and maintain an appropriate audit trail.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction, or portability of your information. You can object to processing based on legitimate interests and withdraw consent for optional analytics at any time. Email us to exercise a right. You can also complain to the UK Information Commissioner’s Office.

Automated decisions and changes

We do not use the information described here to make solely automated decisions with legal or similarly significant effects. We will update this notice when our data uses or providers materially change and bring important changes to users’ attention.