Privacy Policy

Last updated: 28 July 2026

1. What we collect

When you sign up, we collect your email address, the areas you are interested in, and your interest categories. We also store your subscription tier and, if you subscribe to The Full Read, your Stripe customer ID. If you submit an event, we store the URL and your submission.

2. How we use it

We use your email, area preferences, and interest selections to generate and send your weekly newsletter. We use your Stripe customer ID to manage your subscription. We do not use your data for advertising, profiling, or any purpose other than delivering the service.

3. What we do not do

We do not sell your data. We do not share your data with advertisers or third-party marketers. We do not track your behaviour outside of the newsletter (no analytics cookies, no cross-site tracking).

4. Data storage

Your data is stored in a PostgreSQL database hosted on a cloud provider. Payment processing is handled by Stripe; we do not store your card details. Emails are sent via Resend, a transactional email service.

5. Your rights

Under the UK GDPR, you have the right to access, correct, or delete your personal data. You can download everything we hold about you from your manage page (Export my data), or delete your account there at any time (Delete my data), which removes it immediately and logs the erasure. You can also exercise any of these rights by contacting us at hello@spot-check.uk.

6. Data retention

We retain your data for as long as your account is active. If you unsubscribe or delete your account, we remove your personal data within 30 days. Aggregated, anonymised data (such as total subscriber counts) may be retained indefinitely as it can no longer be linked to you.

7. Third-party services

We use the following third-party services that may process data on our behalf:

  • Stripe — payment processing. See Stripe’s privacy policy.
  • Resend — transactional email delivery.
  • Vercel — hosting and infrastructure.
  • Neon — managed PostgreSQL database hosting.
  • Anthropic and OpenRouter — AI event extraction and newsletter writing (event text only, no reader profiles).
  • Voyage AI — text embeddings for event similarity (event text only).
  • Nominatim (OpenStreetMap) — place-name geocoding for area matching.

8. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via the newsletter or email.

9. Contact

For questions about this policy or your data, contact us at hello@spot-check.uk.