Privacy Notice

Last updated: May 2026

1. Who we are

This Privacy Notice describes how Bureau of Creative Intelligence ("we", "us") collects and processes personal data in connection with SuperScope (the "Service"). We act as the data controller for personal data processed through the Service.

2. Data we collect

Account data: name, email address, hashed credentials.
Content data: prompts, briefs and generated PRDs you create in the Service.
Support data: messages you send us and their metadata.
Usage and device data: pages viewed, feature interactions, IP address, browser and device identifiers, approximate location derived from IP, log timestamps.
Cookies: essential cookies for sign-in and session management; limited analytics cookies (where used).

3. Purposes and legal bases

Provide the Service (account creation, generating PRDs, storing your library) — performance of a contract.
Security and fraud prevention (abuse detection, rate limits, audit logs) — legitimate interests.
Product improvement (aggregated analytics, debugging) — legitimate interests.
Customer support (responding to your messages) — performance of a contract / legitimate interests.
Legal compliance (tax, accounting, responding to lawful requests) — legal obligation.
Marketing emails (only where you have opted in) — consent, which you can withdraw at any time.

4. Sharing your data

We share personal data with:

Stripe — our payment processor, which handles checkout, billing, card data, subscription management and refunds. See Stripe's privacy policy.
Hosting and infrastructure providers (cloud hosting, database, email delivery) acting as our processors.
AI model providers that process prompts to generate output, under contractual confidentiality terms.
Analytics and error-monitoring tools we use to operate the Service.
Professional advisers (legal, accounting) where reasonably necessary.
Authorities where required by law or to protect our rights.

5. International transfers

Some of our processors are located outside your country, including outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.

6. Retention

We keep account and content data for as long as your account is active, and for a reasonable period afterwards to comply with legal obligations, resolve disputes and enforce our agreements. Logs and analytics data are retained for a shorter period and then deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. Users in the UK/EEA may lodge a complaint with their supervisory authority. We aim to respond to requests within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging and least-privilege principles. No system is perfectly secure; we continually work to improve our safeguards.

9. Cookies

We use essential cookies needed to sign you in and operate the Service, and limited analytics cookies to understand usage. You can manage cookies through your browser settings; disabling essential cookies may break sign-in and other features.

10. Contact

For privacy questions or to exercise your rights, contact us at superscope@bureauofcreativeintel.com.