Legal
Security
Last updated 3 October 2026.
This page describes how JH Creative AI treats customer and prospect data. It sits with the privacy policy, terms and cookie policy.
Where data is stored
Account details, brand context, leads, drafts and files you upload are stored in the application database and file storage for that workspace. Stripe handles card payments. Email to us goes to info@jhcreative.uk when delivery is configured. We do not sell your data.
Workspace isolation
Each customer organisation has its own workspace. Application access is limited to that organisation. Operators do not browse one customer's records to serve another.
Who can see it
You, and people you invite. JH Creative AI operators may open a workspace to provide support, fix a fault or meet a legal duty. We do not use your brand files to train a public model.
AI providers
Drafting features call a model provider with the brief you have stored. Review any draft before it represents your business. If a model is not connected, the product does not invent a completed send.
Retention and deletion
We keep account and workspace data while the subscription is active and as needed for billing, security and legal records. Ask for deletion via contact. Backups and logs can remain for a limited period after that.
Your control
Outreach stays a draft until an email provider is connected and you approve a send. You can cancel from billing. Access continues until the period already paid for ends.
UK GDPR
We are the controller for your account data and the processor for personal data you load about your prospects and customers. You remain responsible for a lawful basis to use those contacts. Rights of access, correction, deletion and objection can be used through info@jhcreative.uk.
Practices
Production traffic uses HTTPS. Auth cookies are limited to this site. Passwords are handled by the auth provider. Report a security issue to info@jhcreative.uk.