Privacy Policy

Last updated: 11 March 2026

Who we are

transformationplaybook.ai is operated by Sqwyz Ltd, a company registered in England and Wales. Our registered office is in Worcestershire, United Kingdom.

If you have questions about this policy, contact us at scott@sqwyz.co.uk.

What data we collect

We collect data you provide directly and data generated automatically when you use the site.

Data you provide

  • Account information — name and email address when you create an account
  • Payment information — processed securely by Stripe; we do not store card details
  • Usage data — checklist progress, bookmarks, and preferences you save within the app

Data collected automatically

  • Analytics data — page views, feature usage, and session information collected via Google Analytics and Vercel Analytics
  • Device information — browser type, operating system, and screen size
  • Cookies — see our Cookie Policy for details

How we use your data

  • To provide and maintain your account and subscription
  • To save your progress, bookmarks, and preferences across sessions
  • To process payments through Stripe
  • To send transactional emails (account confirmation, password resets, billing receipts)
  • To improve the product based on aggregated, anonymised usage patterns
  • To send occasional product updates, if you have opted in (you can unsubscribe at any time)

Legal basis for processing (GDPR)

  • Contract — to provide the service you signed up for
  • Legitimate interest — to improve the product and prevent abuse
  • Consent — for marketing communications and non-essential cookies

Who we share data with

We do not sell your data. We share it only with services essential to running the platform:

  • Supabase — authentication and database hosting
  • Stripe — payment processing
  • Vercel — website hosting
  • Google Analytics — website analytics
  • Brevo — transactional and marketing email delivery

Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised analytics data may be retained indefinitely.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, email scott@sqwyz.co.uk. We will respond within 30 days.

International transfers

Some of our service providers (Supabase, Vercel, Stripe) process data in the United States. These transfers are protected by appropriate safeguards including Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice. The “last updated” date at the top of this page will always reflect the most recent version.