Privacy Policy

Introduction

ChatCanvas (chatcanvas.studio) (“we”, “us”, “our”) is a trading name of a sole trader based in the United Kingdom, and is the data controller responsible for your personal data. This Privacy Policy explains how we collect, use and safeguard your personal information when you use our website or contact us.

Conversations and mockups (local-only)

The ChatCanvas editor runs entirely in your browser. Conversation content, avatars and exports you create are stored on your device (including in localStorage) and are not uploaded to our servers. We cannot see, store or recover your mockups. Clearing site data in your browser permanently removes locally saved conversations.

What information we collect

We collect personal information that you provide to us directly through our contact form:

• Full name
• Email address
• Message content and enquiry details

We use Umami, a privacy-focused analytics tool hosted at analytics.baselinerank.com, to understand how visitors use the site (such as which pages are viewed and roughly where visits come from). Umami does not use cookies, does not collect personal data, and does not track you across other websites. We do not use any other cookies or tracking technologies, so no cookie banner is required.

How we use your information

We use contact-form information solely to:

• Respond to your enquiries
• Provide support about ChatCanvas
• Improve the product based on feedback you send us

We do not use your information for marketing without your explicit consent, and we do not sell personal data.

Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on:

• Consent: you provide explicit consent by submitting the contact form.
• Legitimate interests: processing is necessary for us to respond to enquiries, operate the website, and understand aggregate site usage via cookieless analytics.

Data retention

We retain contact information for as long as necessary to respond to your enquiry and for up to 24 months thereafter for record-keeping. You may request deletion at any time via the contact form.

Your rights

Under UK data protection law, you have the right to:

• Access a copy of the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure(“right to be forgotten”)
• Restriction of how we use your data
• Objection to our processing
• Portability of your data to another provider

To exercise any of these rights, use our contact form. We will respond within 30 days.

Data security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction, including encryption in transit (TLS) for the website and contact form.

Third-party services

When you submit the contact form, your details are processed by our hosting provider (typically Vercel) and emailed to us via Resend. Those providers only handle the enquiry for delivery to us. We also use Umami for cookieless analytics as described above. Each provider has its own privacy policy. Mockup content you create in the editor is not sent to these services.

International transfers

Your personal data from the contact form may be processed in the United Kingdom, the EEA or the United States depending on our host and email provider. Where data leaves the UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when it was last revised.

Contact us

Questions about this policy or your data rights? Use our contact form.