Legal
Privacy Policy
Effective date: 29 July 2026
Idea Junkies Ltd ("we", "us", "our") is the data controller for personal data processed through Riff. This policy explains what we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.
Who we are
Idea Junkies Ltd, company number 13851834, registered at 7 Lansdowne Terrace, Gosforth, NE3 1HN. Contact: hello@ideajunkies.co.uk
What we collect
Account data: Name, email address, password (hashed), business details you provide during onboarding.
Content data: Text and voice recordings you submit, drafts generated for you, your voice profile and linguistic analysis derived from your inputs.
Billing data: Handled by Paddle.com, our Merchant of Record. We receive confirmation of payment and subscription status only — we do not store your card details.
Usage data: IP address, browser type, device information, pages visited, and interactions with the Service. Collected via cookies and analytics.
Why we use it and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Providing the Service to you | Performance of a contract |
| Processing payments via Paddle | Performance of a contract |
| Sending service emails | Performance of a contract |
| Sending marketing emails | Consent (you can withdraw anytime) |
| Improving the Service | Legitimate interest |
| Complying with legal obligations | Legal obligation |
Who we share data with
We share data with a small set of processors under written contracts that require them to protect your data:
- Paddle — payments, billing, and VAT
- Xano — backend infrastructure and database hosting
- Amazon Web Services — hosting and NLP processing
- Anthropic — Claude API for content generation
- OpenAI — Whisper API for voice transcription
- Tavily — web research for content generation
- Loops — transactional and marketing email
Some of these providers are based outside the UK. Where data is transferred internationally, we rely on UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or equivalent safeguards.
How long we keep your data
We keep your account and content data for as long as your subscription is active. If you delete your account, we retain your data for 30 days before permanent deletion, so you can restore it if you change your mind. After 30 days, we delete it permanently, except where we are legally required to keep records (for example, billing records for tax purposes, held for 6 years).
Your rights
Under UK GDPR you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (subject to legal retention requirements)
- Restrict or object to processing
- Data portability (receive your data in a machine-readable format)
- Withdraw consent where processing is based on consent
To exercise any of these rights, email hello@ideajunkies.co.uk. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
Cookies
We use cookies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings.
Changes
We may update this policy. If we make material changes, we'll notify you by email or in-product before they take effect.