Privacy Policy

1. Who We Are

AI Did This is an AI education and resource platform for a UK-wide audience. For the personal information described in this policy, AI Did This acts as the data controller.

You can contact us about privacy or data protection at info@howaididthis.com.

2. Information We Collect

The information we collect depends on which parts of the website you use.

Account and profile information

• Your email address and account identifier.
• Sign-in credentials processed by our authentication provider, Supabase.
• Profile information you choose to add, such as your name or bio.
• The prompts you save to your account.

Email updates and notifications

When you join the newsletter or request an update, we collect your email address and the source of the signup. This helps us send the update you requested and understand which form you used.

Training and automation enquiries

When you contact us about training or automation, we may collect your name, email address, business name, website, service interest and the message you submit.

Chatbot information

When you use the FAQ chatbot, we may store the message you send, an anonymous session identifier, the answer returned and technical matching information. Unanswered questions may be recorded so we can improve the knowledge base.

Please do not include passwords, payment details, medical information, confidential business information or other sensitive personal data in chatbot messages.

Technical and usage information

Our hosting and security providers may process information such as your IP address, browser, device, requested page, date and time. If analytics is enabled, we may also receive information about how visitors move through the website.

3. How We Use Your Information

We use personal information to:

• Create, secure and manage user accounts.
• Show your saved prompts and profile information.
• Send newsletters or updates you requested.
• Respond to training, support and automation enquiries.
• Operate and improve the FAQ chatbot.
• Identify unanswered questions and gaps in our content.
• Protect the website from misuse, fraud and security threats.
• Understand and improve website performance.
• Meet legal, regulatory and accounting responsibilities.

4. Our Lawful Bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the activity, we rely on:

• Contract: where processing is needed to create your account or provide a service you requested.
• Consent: for newsletters, notifications and optional non-essential tracking where consent is required.
• Legitimate interests: to answer enquiries, improve our services, protect the website and understand how it is used, where those interests do not override your rights.
• Legal obligation: where we must keep or disclose information to comply with the law.

Where we rely on consent, you may withdraw it at any time. This does not affect processing that took place before withdrawal.

5. Chatbot and AI Processing

The FAQ chatbot uses Google Gemini to help generate an answer from the AI Did This knowledge base. The message you submit and relevant website information may be sent to Google for this purpose.

Chatbot answers are provided for general information. They may be incomplete or incorrect. Do not rely on them for medical, legal, financial or other high-stakes decisions.

We do not use the chatbot to make decisions about you that produce legal or similarly significant effects.

6. Who Receives Your Information

We do not sell your personal information. We use service providers that help us operate the website:

• Supabase: authentication, database storage and account-related features.
• Vercel: website hosting, delivery and technical logs.
• Sanity: management and delivery of blog content.
• Google: Gemini chatbot processing and Google Analytics where analytics is enabled.

These providers process information under their own security and privacy arrangements. We may also disclose information where the law requires it, or where reasonably necessary to protect our users, rights or services.

7. International Data Transfers

Some service providers may process information outside the United Kingdom. Where this happens, we take reasonable steps to use providers and safeguards that support lawful international data transfers.

These safeguards may include an adequacy decision or approved contractual protections, depending on the provider and destination.

8. Cookies and Analytics

We use essential cookies or similar browser storage to support account sessions, security and core website functions.

When configured, we use Google Analytics for statistical purposes to understand which page paths are visited, traffic and referral sources, device and browser information, landing pages and general patterns in how the website is used. This helps us improve the website and our services. Query-string values are not intentionally sent by our analytics implementation, and authentication callback pages are excluded from analytics.

Our current analytics setup is not intended for personalised advertising, remarketing, demographic profiling or User-ID tracking. We do not intentionally send names, email addresses, form contents, FAQ questions, prompt text or profile data to Google Analytics.

You can object to statistical analytics at any time using the control below. Your choice applies to this browser and can be changed later.

You can also control or delete cookies and browser storage through your browser settings, although blocking essential storage may affect account features.

9. How Long We Keep Information

We keep personal information only for as long as it is needed for the purpose it was collected, including:

• Account and profile information while your account remains active, unless a longer period is required by law.
• Saved prompts until you remove them or your account is deleted.
• Newsletter and notification details until you unsubscribe, withdraw consent or the relevant list is closed.
• Enquiries while we respond and for a reasonable period afterwards for service, legal and record-keeping needs.
• Chatbot logs while they remain useful for support, security and improving the service.
• Security and technical records for as long as reasonably needed to investigate incidents and protect the website.

When information is no longer needed, we delete it, anonymise it or securely restrict its use.

10. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

• Ask for a copy of your personal information.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your information.
• Ask us to restrict how your information is used.
• Object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent where consent is our lawful basis.

To exercise a right, email info@howaididthis.com. We may need to confirm your identity before completing a request.

You may also complain to the Information Commissioner's Office through its data protection complaints service.

11. Security and Automated Decisions

We take reasonable technical and organisational steps to protect personal information. These include access controls, authentication, database protections and trusted hosting services.

No website or online storage system can guarantee complete security. Please use a strong, unique password and contact us if you believe your account or information has been compromised.

We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.

12. Changes and Contact

We may update this policy when our services, providers or legal responsibilities change. The date at the top shows when the policy was last revised.

Questions, privacy requests and unsubscribe requests can be sent to info@howaididthis.com.