Privacy.
We hold very little about you, and nothing you make. Here is all of it.
The short version
- We never receive your presentations, your files or your brand. The designer runs inside your own Claude. What you put in a chat is between you and Anthropic, under your Claude settings.
- Stripe sells it to you, through Link, and handles your payment. It passes us what we need to deliver and renew your licence: your name, email, country, billing address, the size you bought, and your company's name if you give it.
- You get email about your licence: your receipt from Link with the link to your file, every update, and a reminder before you renew. News only if you asked for it at checkout.
Who is responsible
Design Superpowers is the controller for the data we hold, below. Contact: hello@designsuperpowers.com. Stripe is responsible for the data it handles as the seller (see “Who else handles it”).
What we hold, why, and for how long
| What | Why | Legal basis | How long |
|---|---|---|---|
| Name, email, country, billing address, size bought, renewal date, and your company's name if you give it | To deliver and renew your licence, and send your updates | The contract (GDPR art. 6(1)(b)) | While you have a licence with updates, then as bookkeeping requires |
| Records of each sale and payout that Stripe reports to us | Bookkeeping and tax | Our legal duty to keep accounts (art. 6(1)(c)) | Five years after the end of the year of sale, as Norwegian bookkeeping law requires |
| Your email for news | To tell you when the designer learns something new | Your consent (art. 6(1)(a)), your choice at checkout | Until you unsubscribe |
| Emails you send us | To answer you | Our legitimate interest in helping you (art. 6(1)(f)) | Two years after the last email |
We never see or hold your card number; Stripe does.
This website sets no cookies and stores nothing on your device. It counts page visits and a few button clicks with PostHog, in the EU, in a mode that uses no cookies and stores nothing on your device, and keeps no profile of you. We don't run ads that follow you, sell or share data for advertising, or make automated decisions about you.
Who else handles it
| Who | What for | Where |
|---|---|---|
| Stripe, through Link | Sells it to you as the seller (the merchant of record): checkout, payment, VAT, receipts, renewal, and your account, where you cancel or move up | EU and USA |
| Vercel | Serving this website | Worldwide |
| Namecheap | Passing email sent to hello@designsuperpowers.com on to our inbox | USA |
| PostHog | Counting visits to this website, without cookies and without storing anything on your device | EU |
Stripe is the seller. For the sale itself, including the IP address and card details it uses to charge the right VAT and stop fraud, Stripe decides how your data is used and is responsible for it under its own privacy policy (stripe.com/privacy). It passes us only the details in the first table.
When data goes outside the EEA, it is protected by the EU–US Data Privacy Framework where the company receiving it is certified under it, or by the EU's standard contractual clauses.
We answer and send email from our own mailbox. If we start using a mail service to send updates or news, we name it here before it gets your email.
Nobody else gets your data, unless the law requires it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit or object to how we use it, and to receive it in a common format. Where we rely on your consent, you can withdraw it any time; every news email has an unsubscribe link. Write to hello@designsuperpowers.com; we answer within a month, usually much sooner.
Some data we must keep for bookkeeping even if you ask us to delete it; we tell you which.
If you think we handle your data wrongly, you can complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no), or to the authority where you live.
What the designer does in your Claude
Not ours to hold, but you may want to know: the designer reads what you give it in a chat, and when Claude allows, it may open the website you name to measure its look and ask Google Fonts whether a font exists. A finished presentation loads its fonts from Google Fonts and a motion library from jsDelivr when someone opens it. None of this reaches us. Details: Security and data.
Changes
If this notice changes in a way that matters, we email you before it applies. Version 1.0.