Last updated 11 October 2026
Privacy notice
What we collect when you buy Copywriting OS, why we collect it, and your rights under UK data protection law.
Who we are
The controller of your personal data is MX Digital Ltd, a company registered in England and Wales (company number 17487288), whose registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. For anything about your data, email maarij@mxdigital.app.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
- Your email address, which you give at checkout or when you ask for a new download link.
- Order records: what you bought, when, the amount and currency, and the order reference from Stripe.
- Download records: when your download links were created and used.
- Support emails: what you send us and our replies.
We don't collect your card details; Stripe handles payment directly. We don't collect the client briefs or copy you work on: Copywriting OS runs inside your own AI tool, and that work stays there.
Why we use it, and our lawful basis
- To deliver your purchase, give you access to downloads and updates, and let you recover your link. Our lawful basis is the contract with you.
- To answer support requests and handle refunds: the contract with you, and our legitimate interest in looking after customers.
- To keep order records for accounting and tax: our legal obligations.
- To prevent fraud and the misuse of download links: our legitimate interests.
Marketing
We don't send you marketing emails unless you've opted in. If you do, every email has a way to unsubscribe, and you can withdraw consent at any time. Emails about your purchase, such as your download link, aren't marketing.
Who processes it for us
- Stripe: payments, tax and receipts. As merchant of record, Stripe also uses payment data for its own legal obligations, under its own privacy policy.
- Supabase: the database that holds order and download records.
- Resend: sending emails, such as your download link.
- Vercel: hosting this website.
Some of these providers store or process data outside the UK, including in the United States. Where they do, the transfer is protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK-US data bridge.
How long we keep it
- Order records: six years from the end of the financial year of the purchase, for tax and accounting.
- Download records: for as long as your licence lasts, so you can recover your access.
- Support emails: up to two years after the conversation ends, or longer if they relate to an order record we must keep.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on your consent, you can withdraw it at any time.
To use any of these rights, email maarij@mxdigital.app. We'll reply within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
Changes to this notice
If what we do with your data changes, we'll update this notice and the date at the top.