BESPOKEOS · LEGAL

Privacy Notice

Last updated: 13 September 2026 · Version: 2026-09-13-LegalV1

This notice explains how personal information is used when you use BespokeOS.

Information we collect

We may process account details, email address, authentication records, project briefs, uploaded material, generated project records, build history, Credit transactions, payment identifiers, support messages, security events, IP address and operational logs.

Payment data

Full payment-card numbers and card security codes are handled by the payment provider rather than stored by BespokeOS.

Why we use information

We use information to create and secure accounts, verify email, provide concepts and builds, process payments and Credits, deliver source packages, provide support, prevent fraud and abuse, operate hosting, maintain security, diagnose failures, keep accounting records and comply with legal obligations.

Lawful bases

Processing may be necessary to perform a contract, take steps before entering one, comply with legal obligations, or pursue legitimate interests such as security and fraud prevention. Where consent is required, consent is used for that activity.

AI processing

Project briefs, instructions and generated material may be sent to configured AI providers to generate, analyse, review or edit output. Do not submit unnecessary personal or confidential information.

Service providers

Information may be shared with providers used to operate the service, including AI providers, Stripe, Brevo, hosting providers and professional advisers where necessary.

International processing

Some providers may process information outside the UK. Where UK data-protection law restricts a transfer, an appropriate lawful mechanism or safeguard must apply.

Retention

Information is kept only as long as reasonably necessary for support, security, accounting, disputes and legal obligations.

Security

BespokeOS uses access controls, protected secrets, authenticated sessions and operational logging intended to reduce unauthorised access.

Your rights

Subject to applicable law, you may have rights to access, correct, erase or restrict personal information, object to certain processing, request portability and withdraw consent where processing relies on consent. You may also complain to the UK Information Commissioner's Office.

Cookies

See the Cookie Notice.

Contact

Privacy enquiries: gpaul755@gmail.com.