Privacy Policy · Space Cake

This Privacy Policy explains how Scott John Mathews trading as Space Cake ("Space Cake", "we", "us") collects and uses personal data when you use spacecake.one (the "Service"). We are the data controller for your account data. For the customer emails we process on your behalf, you are the controller and we are your processor — see our Data Processing Agreement.

Who we are

Space Cake is operated by Scott John Mathews trading as Space Cake, based in the United Kingdom at 31 Holcroft Drive, Wigan, WN2 5YP, United Kingdom. For privacy questions, contact contact@spacecake.one.

Data we collect

Account data — your name, email, business details, and login credentials.
Billing data — subscription and payment details, handled by our payment processor; we do not store full card numbers.
Connected-inbox data — the emails in inboxes you connect, which we process to classify messages and draft replies.
Usage data — logs and analytics about how the Service is used, including consent-based marketing-site analytics, to keep it secure and improve it.

How we use data

To provide the Service — reading, classifying, and drafting replies to your email.
To manage your account, billing, and support.
To secure, maintain, and improve the Service.
To comply with legal obligations.

Our lawful bases are performance of our contract with you, our legitimate interests in running and securing the Service, consent where you accept optional analytics cookies, and compliance with legal obligations.

AI processing

We use trusted AI providers to classify messages and generate draft replies. These providers process the content only to return a result to us and operate under agreements that prohibit using your data to train their models for other purposes.

Sharing

We do not sell your data. We share data only with service providers (sub-processors) that help us run the Service — for hosting, email delivery, payments, and AI processing — under appropriate agreements, and where required by law. We never share data between customer businesses.

International transfers

Where data is processed outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.

Retention

We keep account data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, subject to legal retention requirements. You can delete your account and its data at any time.

Your rights

Under UK GDPR you have rights to access, correct, delete, restrict, and port your personal data, and to object to certain processing. To exercise them, contact contact@spacecake.one. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Changes

We may update this policy and will post the new version here with an updated date.