Privacy Policy

The data controller is BUDHILL CONVENIENCE STORE LIMITED, a company registered in the United Kingdom, at 8/10 Budhill Avenue, Glasgow G32 0PN, United Kingdom. You can reach us about privacy at support@budconsto.shop or +44 7731446563.

• Account data: email address and authentication details when you register or subscribe.
• user input and design inputs: the text descriptions you enter, options you select, and any reference files you upload to generate a design.
• Generated outputs: the design briefs, design files and e-cards produced for you.
• Subscription and billing data: plan, billing status and country. Card payments are processed by Stripe; we receive confirmation and limited metadata but never your full card number.
• Support data: messages you send us through the contact form or email.
• Technical and usage data: IP address, device and browser type, and basic interaction logs used for security and reliability.

Collection sources are limited: most data is provided by you when you use the studio, subscribe, or contact us. Technical data is collected automatically by our hosting and security systems. Billing confirmations come from Stripe.

• To provide the studio (generate briefs, designs and e-cards) — performance of a contract.
• To manage subscriptions and payments — performance of a contract and legal obligation.
• To provide support — performance of a contract and our legitimate interests.
• To secure and improve the service — our legitimate interests in a safe, reliable product.
• To send service and, where permitted, marketing messages — consent or legitimate interests; you can opt out anytime.
• To meet legal, tax and accounting duties — legal obligation.

We do not use your user input and design inputs, uploads or generated outputs to train AI models.

Payments and subscriptions are handled on Stripe's hosted checkout and billing portal. Paperbud does not see or store full card numbers, CVC or full bank details. Stripe acts as an independent processor under its own terms and privacy notice.

We share personal data only with processors that help us run the service, under contract:

• Hosting and delivery: Vercel (application hosting and content delivery).
• Payments and billing: Stripe.
• Database, authentication and file storage: Supabase.
• AI provider generation: our AI provider processes your user input and design inputs solely to return your result.
• Email: our email provider for transactional and support messages.

We may also disclose data where required by law. We do not sell your personal data.

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or adequacy decisions, so your data keeps an equivalent level of protection.

Account and billing records are kept for the life of your account and for the periods required by tax and accounting law after closure. user input and design inputs, uploaded reference files and generated outputs are cached to run and improve your session and are cleared on a rolling basis, by default within 30 days, unless you save them to your account. Support messages are kept while needed to resolve and evidence the issue.

We use encryption in transit, access controls, and reputable infrastructure providers. Secret keys are stored in server-side environment configuration, never in the browser. No system is perfectly secure, but we work to protect your data and to notify you and regulators of qualifying breaches as required.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate data or complete incomplete data.
• Delete data (right to erasure) where applicable.
• Restrict or object to certain processing, including direct marketing.
• Data portability.
• Withdraw consent at any time, without affecting prior processing.

UK and EU (UK GDPR / EU GDPR):the rights above apply, and you may complain to a supervisory authority (in the UK, the Information Commissioner's Office).

California (CCPA/CPRA): you may request access, deletion and correction, and you have the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined under California law. We do not discriminate against you for exercising your rights.

To exercise any right, email support@budconsto.shop. We verify requests before acting and respond within the timeframes required by law.

The studio uses AI to generate design suggestions from your user input. This is content generation, not automated decision-making that produces legal or similarly significant effects about you. You always review, edit and decide what to use.

Paperbud is not for children under 13, who may not use the service. Users aged 13–17 may only use Paperbud with the consent and supervision of a parent or guardian. We do not knowingly collect data from children under 13; if you believe a child has provided data, contact us and we will delete it.

We may update this policy and will change the "last updated" date above. For any privacy question, request or complaint, contact BUDHILL CONVENIENCE STORE LIMITED, 8/10 Budhill Avenue, Glasgow G32 0PN, United Kingdom, or support@budconsto.shop.