1. Who is responsible for your data
CONSCIOUS POTENTIAL LIMITED is the data controller for personal data processed through Potentia. You can reach us at support@conspote.shop, by phone on +44 7351759549, or by post at 8 Mauricewood Steadings, EH26 0RW, Scotland, United Kingdom.
2. What we collect
- Account & billing data: your name, email address and subscription status. Card payments are processed by Stripe; we never receive or store your full card number.
- Coaching inputs: the situation, goals, timelines, constraints, strengths and worries you type into the Studio, and any CV or job-description text you choose to paste for context.
- Generated outputs: the growth plans, assets and clips created from your inputs.
- Support & lead data: messages you send through our contact and readiness-check forms.
- Technical data: limited device, browser and usage information and essential cookies needed to run the site securely.
3. Collection sources
Our collection sources are:
- Directly from you — the coaching inputs, account details and messages you enter when you create a plan, subscribe, or contact us.
- Automatically from your device — technical and usage data generated by your browser and essential cookies as you use the site.
- From our service providers — limited data from our hosting, payment and email providers acting on our behalf (for example, subscription status from Stripe).
We do not buy personal data or obtain it from third-party data brokers.
4. Why we use it and our legal bases
- To provide the service — generating plans, assets, clips and your Momentum Pack (performance of a contract).
- To take payment and manage subscriptions (performance of a contract; legal obligation for records).
- To provide support and respond to enquiries (legitimate interests; performance of a contract).
- To keep the service secure and prevent abuse (legitimate interests; legal obligation).
- To send transactional messages such as your starter outline or receipts (performance of a contract; consent where required).
We do not use your coaching inputs or generated outputs to train AI models, and we do not sell your personal data.
5. AI data handling — your input, generated results and files
User input. The user input you type into the Studio (your situation, goal, timeline, constraints, strengths and worries) and any CV or job-description text you paste is processed to generate your plan and assets and to let you revisit them during your session. We take the text only — we do not perform facial recognition and we do not edit photographs of real people.
Generated results. The plans, images, roadmap clips and Momentum Packs created from your input are stored so you can view and download them during your session.
Uploaded and example data. Any sample or example text you provide is treated the same way as your other input and used only to produce your result.
How AI generation works and the AI provider. The core growth-plan engine is rule-based and runs on our own servers. Where an AI provider (a third-party AI model service) is used to help generate text, image or video results, your input is sent to that AI provider solely to return your result, under contract and only for that purpose. We do not use your input or generated results to train AI models, and our AI provider is contractually restricted from using your data to train its models.
Retention and deletion. Input and generated results are retained for up to 30 days to support your session, then deleted or anonymised, unless you save them to your account or we must keep them longer for a legal reason. You can ask us to delete them sooner at any time by emailing support@conspote.shop.
6. Who we share it with
We share personal data only with service providers who help us run Potentia, under contract and only as needed:
- Hosting & delivery: Vercel (application hosting and content delivery).
- Database & storage: Supabase (account, lead and session data).
- Payments: Stripe (subscription billing; Stripe is the payment controller for card data).
- Email: our email provider, to send you transactional messages and support replies.
- AI provider: where AI-assisted generation is used, a third-party AI model service that processes your input only to return your result and is contractually barred from training on your data.
We may also disclose data where required by law or to protect our rights, users or the public.
7. International transfers
Some providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision.
8. How long we keep it
- Coaching inputs & outputs: up to 30 days, unless saved to your account or required for a legal reason.
- Account & subscription records: for the life of your account and up to 6 years afterwards for tax and accounting.
- Support & lead messages: up to 24 months.
9. How we protect it
We use encryption in transit, access controls, and reputable processors. Card data is handled entirely by Stripe. No system is perfectly secure, but we work to protect your data and to notify you and regulators of any serious breach as the law requires.
10. Your rights (UK GDPR, EU GDPR and CCPA)
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data (“right to be forgotten”);
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time; and
- for California residents, to know, delete, correct, and to not be discriminated against for exercising these rights.
To exercise any right, email support@conspote.shop. We respond within the timeframes required by law.
11. Do Not Sell or Share
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of in that respect, but you may still contact us with any request.
12. Cookies and analytics
We use essential cookies to run the site and keep it secure. Any analytics we use are privacy-conscious and described in our Cookie Policy.
13. Automated decisions and children
Plans are generated automatically from your inputs, but they are informational suggestions only and produce no legal or similarly significant effect on you. Potentia is not intended for children under 13, and users aged 13–17 must have the consent of a parent or guardian. We do not knowingly collect data from children under 13.
14. Complaints and contact
Contact us first at support@conspote.shop and we’ll do our best to help. If you are in the UK, you may also complain to the Information Commissioner’s Office (the ICO). If you are in the EEA, you may complain to your local data protection authority.