GlowKit ("we", "our", "us") is operated by MatMad Ltd. We are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

Account data: Name, email address, company name (provided during registration).

Property data: Property details you enter into the generation form (address, price, features, etc.). This data is stored to provide pack history and regeneration features.

Billing data: Payment information is processed securely by Stripe. We do not store your card details — only your Stripe customer ID and subscription status.

Usage data: We record generation counts, feature usage, and login activity to manage your plan limits and improve the Service.

Technical data: IP address, browser type, and device information collected automatically for security and analytics purposes.

2. How we use your data

We use your data to: provide and improve the Service; manage your account and subscriptions; generate property marketing content via our AI provider; communicate with you about your account; comply with legal obligations.

3. Legal basis for processing

We process your data on the basis of: contractual necessity (to provide the Service); legitimate interest (to improve the Service and prevent fraud); consent (for marketing communications); legal obligation (tax, regulatory requirements).

4. Third-party processors

We share data with the following processors, all of whom have appropriate data processing agreements in place:

Supabase — authentication and database hosting
OpenAI — AI content generation (property data is sent to generate marketing copy)
Stripe — payment processing
Resend — transactional email delivery

5. Data retention

Account data is retained for the duration of your account plus 6 years (as required for tax purposes). Property data and generated packs are retained until you delete them or close your account. You may delete individual packs at any time from your dashboard.

6. Your rights

Under UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing; withdraw consent at any time.

To exercise any of these rights, contact us at info@glowkitai.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

8. International transfers

Some of our processors (OpenAI, Stripe) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (TLS), secure authentication, and access controls.

10. Contact & complaints

Data controller: MatMad Ltd. Contact: info@glowkitai.com.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Privacy Policy