Privacy notice
Version 2026-10-04-draft
Draft. This page hasn't been reviewed by a solicitor yet, and details marked TBD are still to be confirmed.
Who we are
Natter is a trading name of [Company name TBD] Ltd, registered in England and Wales (company number [TBD]), at [Registered office address TBD]. We are the controller of the personal information described here. Contact us about privacy at hello@natter.studio.
What we collect
- Your email address, and your name and phone number if you give them.
- What you tell us in the chat about your business, and any files you upload such as a logo or photos.
- The address of your current website, if you share it, and what we read from that public site.
- Your feedback on your prototype, and your choices on your proposal.
- If you buy: billing details, handled by Stripe. We never see your full card number.
- Technical data needed to keep the service safe, such as a scrambled (hashed) version of your IP address used for rate limits, and the result of the Cloudflare bot check.
How we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Verifying your email and designing your prototype and proposal | Steps you ask us to take before entering a contract |
| Building, launching and looking after your site if you buy | Contract |
| Preventing abuse, fraud and spam, and keeping the service secure | Legitimate interests |
| Sending you occasional news and offers (only if you tick the box) | Consent, which you can withdraw at any time |
| Keeping accounting and tax records | Legal obligation |
AI and automated processing
Your chat, uploads and website are processed by AI models to write your brief, design your prototype and price your proposal. We don't make decisions with legal or similarly significant effects about you using automated means alone. A person reviews anything we launch. Anthropic doesn't use data sent through its commercial API to train its models.
Who we share it with
We use these service providers (processors), who act only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Anthropic | AI models that run the chat, read your current site and design your prototype | USA |
| Supabase | Database, sign-in and file storage | UK/EU (London region) |
| Vercel | Hosting for this website and your preview | Global, with EU/US data centres |
| Resend | Sending emails such as your sign-in code | USA |
| Cloudflare | Turnstile bot check | Global |
| Image provider (TBD) | Creating images for your prototype | TBD |
| Stripe | Taking payments, if you buy | USA/EU |
Where data goes outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement (or Addendum) to protect it. We never sell your data.
How long we keep it
- If you don't buy, we delete your project, chat and uploads automatically 90 days after you last used it. Your preview link stops working after 30 days.
- If you buy, we keep your project for as long as we work together, then for 6 years for tax and legal reasons.
- Marketing consent records are kept until you unsubscribe, plus 2 years as proof.
Cookies
We only use cookies that are essential to sign you in and keep the site secure. See our cookie policy.
Your rights
You can ask to see, correct, delete or move your data, object to or restrict how we use it, and withdraw consent. Email hello@natter.studio and we'll reply within one month. If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If we change this notice we'll update the version above, and tell you if the change affects you.