Privacy Policy

Aimarket UK (referred to as "we", "us", "AiMarket") is the data controller for personal data processed through the AiMarket platform at aimarketuk.com.

Registered address: 28 London Road, UK. Company Number: 10106764.

We only collect what we need to run the service:

• Account data — email address, password hash, and any name you provide when signing up.
• Business details you enter — company name, industry, target audience, product details, brand assets (logos), and similar inputs used to generate marketing plans.
• Generated content — the marketing plans, emails, campaigns, prospect lists, and other outputs we produce for you.
• Billing data — subscription tier, plan status, and Stripe customer ID. We never see or store your card details — those go directly to Stripe.
• Integration tokens — OAuth tokens for connected accounts (LinkedIn, X, WordPress, Meta, GitHub) stored encrypted; used only to publish or schedule on your behalf.
• Usage & diagnostic data — basic logs (timestamps, request paths, error traces) needed to keep the service running and debug issues.

• Provide the AiMarket service and generate the outputs you request.
• Authenticate your account and keep it secure.
• Process subscription payments via Stripe.
• Send service emails (account, billing, campaign notifications).
• Respond to your support requests.
• Detect and prevent abuse, fraud, and security incidents.

We do not sell your personal data, and we do not use your business inputs or generated content to train third-party AI models.

We process personal data under the UK GDPR and (where applicable) the EU GDPR, on the following lawful bases:

• Contract — to deliver the service you've signed up for.
• Legitimate interests — to secure the platform, prevent abuse, and improve reliability.
• Consent — where you connect a third-party integration or opt into optional communications.
• Legal obligation — to meet tax, accounting, and regulatory requirements.

We use a small number of trusted providers to run AiMarket. Each is bound by a data-processing agreement and processes data only under our instructions:

• Supabase — database, authentication, storage.
• Cloudflare — hosting, CDN, edge runtime.
• Stripe — payment processing (PCI-DSS Level 1 certified). Card data is submitted directly to Stripe and never touches our servers.
• Resend — transactional and campaign email delivery.
• Google (Gemini via Lovable AI Gateway) — AI generation for marketing plans, emails, and analyses.
• Sentry — error monitoring (diagnostic data only).

We use a minimal set of cookies and local storage entries strictly needed to keep you signed in, remember your active brand, and preserve UI preferences (e.g. tour progress). We do not use advertising cookies or third-party trackers for marketing purposes.

We delete your data on account closure. When you delete your AiMarket account, we remove your business details, generated plans, campaigns, prospects, and connected integration tokens.

Limited records may be retained where the law requires it (for example, invoice and tax records held by Stripe and by us for statutory accounting periods).

To delete your account, email info@aimarketuk.com from your account address and we will action the request.

Under UK/EU GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent for optional processing at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU supervisory authority.

To exercise any of these rights, email info@aimarketuk.com. We aim to respond within 30 days.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production systems is restricted, authenticated, and logged. Row-level security policies ensure users can only access their own data through the app. Card data is handled by Stripe under their PCI-DSS Level 1 certification.

No online service can guarantee absolute security. If you believe your account has been compromised, email info@aimarketuk.com immediately.

Some of our subprocessors are based outside the UK/EEA. Where personal data is transferred internationally, we rely on Standard Contractual Clauses, UK IDTAs, or equivalent safeguards approved under UK/EU GDPR.

We may update this policy as the service evolves. Material changes will be highlighted in-app or by email. The "Last updated" date at the top of this page always reflects the current version.

Questions, requests, or complaints about privacy at AiMarket? Email info@aimarketuk.com and we'll get back to you.

Aimarket UK · 28 London Road, UK · Company No. 10106764