Privacy Notice

This Privacy Notice explains how Samuel Nwokemodo, a sole proprietor ("Samuel Nwokemodo", "I", "me", or "my"), as data controller, collects, uses, discloses, and protects your personal data when you use the Samchu-AI platform and services (the "Service"). I am committed to handling your personal data in accordance with applicable data protection law.

1. Data Controller

Samuel Nwokemodo is the data controller responsible for your personal data in connection with the Service. Paddle acts as a data processor and merchant of record for payment-related data, as described below.

2. Categories of Personal Data I Collect

• Account data: name, email address, and login credentials when you create an account.
• Project content: the problem statements, prompts, research documents, and outputs you submit or generate through the Service.
• Usage and telemetry: feature usage, interactions, and analytics about how you use the Service.
• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Support communications: the content of messages you send to my support team.
• Billing data: subscription status and plan, handled by Paddle as merchant of record (see below).

3. Purposes & Legal Bases

• Providing the Service (account creation, running analysis, generating reports) — necessary for the performance of a contract with you.
• Account management and security (authentication, fraud prevention, access control) — necessary for the performance of a contract and my legitimate interests in security.
• Billing and subscription management — necessary for the performance of a contract; payment data is processed by Paddle as merchant of record.
• Product improvement (analysing usage to improve features and reliability) — my legitimate interests in developing and maintaining the Service.
• Customer support (responding to your requests) — necessary for the performance of a contract and my legitimate interests.
• Legal compliance (meeting record-keeping and regulatory obligations) — necessary to comply with a legal obligation.
• Marketing (where you opt in) — based on your consent, which you may withdraw at any time.

4. Data Sharing & Recipients

I do not sell your personal data. I share data with the following categories of recipients:

• Service providers and subprocessors: cloud hosting, analytics, email delivery, and support tooling providers, engaged to help me operate the Service.
• Paddle (Merchant of Record): for the sale of the product, subscription management, payments, tax compliance, and invoicing. Paddle processes payment-related data as a data controller/processor in its own right under its terms.
• Professional advisers: legal, accounting, and audit advisers where necessary.
• Authorities: where required by law, court order, or to protect my rights and safety.

5. International Data Transfers

Your personal data may be processed in countries outside your jurisdiction of residence, including by my service providers and by Paddle. Where this involves a transfer outside the UK/EEA, I rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision, and I require my subprocessors to do the same.

6. Data Retention

I retain your personal data only as long as necessary for the purposes set out above and to comply with legal obligations. Account and project data is retained while your account is active and for a limited period after deletion to allow recovery, after which it is deleted or anonymised. Billing records are retained as required by tax and accounting law.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict the processing of, port, or object to the processing of your personal data, to withdraw consent, and to complain to your local data protection authority. Residents of the UK/EEA have these rights under the GDPR, and I will respond to verified requests within one month. To exercise any right, contact me through the support channels in the Service.

8. Security

I implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular review of my systems. However, no method of transmission or storage is completely secure, and I cannot guarantee absolute security.

9. Cookies

I use essential cookies to operate the Service and authenticate your session, and analytics cookies to understand usage and improve the Service. You can manage your cookie preferences through your browser settings. Where marketing cookies are used, they require your consent.

10. Children's Privacy

The Service is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction), and I do not knowingly collect personal data from them. If you believe I have collected data from a minor, contact me and I will delete it.

11. Changes to This Notice

I may update this Privacy Notice from time to time. I will notify you of material changes by email or in-app notice. Continued use after the effective date constitutes acceptance of the updated notice.

12. Contact

For privacy questions or to exercise your rights, contact Samuel Nwokemodo via the support channels available in the Service.