Privacy Policy

2 Marshmallows Limited, trading as Tiny Ghost Lab ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

1. INFORMATION WE COLLECT

1.1 Information You Provide

• Account information (name, email address, company name)

• Billing information (processed securely via our payment provider)

• Business information provided via onboarding form (company description, target audience, preferred tone)

• Example content you share to train our AI

• Communications with our support team

1.2 Information Automatically Collected

• Usage data (features used, subscription tier)

• Technical data (IP address, browser type, access times)

• Performance data (engagement metrics from published content)

1.3 Information We Do NOT Collect

• Social media account passwords

• Direct access to your social media accounts

• Personal data of your social media followers

2. HOW WE USE YOUR INFORMATION

2.1 To Provide Our Service

• Generate personalized AI content based on your inputs

• Deliver content to your social media accounts via our Typefully account

• Process payments and manage subscriptions

• Provide customer support

2.2 To Improve Our Service

• Train and improve our AI models (using anonymized data only)

• Analyze service usage patterns

• Develop new features

2.3 To Communicate With You

• Send service-related notifications

• Respond to inquiries

• Provide technical support

• Send billing notifications

3. LEGAL BASIS FOR PROCESSING

We process your personal data based on:

• Contract: To fulfill our service agreement with you

• Legitimate Interests: To improve our Service and prevent fraud

• Consent: For marketing communications (where applicable)

• Legal Obligations: To comply with applicable laws

4. DATA SHARING AND DISCLOSURE

4.1 We Share Data With:

• Typefully: To deliver content to your account

• Payment Processors: To handle transactions securely

• Analytics Providers: To understand service usage (anonymized data only)

4.2 We Do NOT:

• Sell your personal data

• Share your content with other clients

• Use your business information for any purpose other than providing our Service

4.3 Legal Disclosure We may disclose information if required by law or to protect our rights and safety.

5. DATA RETENTION

• Account Data: Retained while your account is active plus 12 months

• Generated Content: Deleted 90 days after delivery

• Billing Records: Retained for 7 years as required by law

• Support Communications: Retained for 2 years

You may request deletion of your data at any time, subject to legal requirements.

6. DATA SECURITY

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest

• Regular security assessments

• Access controls and authentication

• Secure data centers

However, no method of transmission over the internet is 100% secure.

7. YOUR RIGHTS

Under UK GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate information

• Erase your data ("right to be forgotten")

• Restrict processing in certain circumstances

• Data Portability - receive your data in a portable format

• Object to processing based on legitimate interests

• Withdraw Consent where processing is based on consent

To exercise these rights, contact us at joshua@tinyghostlab.com.

8. INTERNATIONAL TRANSFERS

Your data may be processed in countries outside the UK. We ensure appropriate safeguards are in place for any international transfers in compliance with UK GDPR.

9. COOKIES

Our website uses essential cookies for functionality and analytics cookies to improve user experience. You can control cookie preferences through your browser settings.

10. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

11. THIRD-PARTY LINKS

Our Service may contain links to third-party websites. We are not responsible for their privacy practices.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify you of material changes via email or through our Service.

13. DATA PROTECTION OFFICER

For privacy-related inquiries, contact our Data Protection Officer at: Email: joshua@tinyghostlab.com Address: 2 Marshmallows Limited, 4 Lothian Street, Dalkeith, EH22 1DS.

14. CONTACT INFORMATION

For questions about this Privacy Policy or our privacy practices: Email: joshua@tinyghostlab.com Address: 2 Marshmallows Limited, 4 Lothian