Privacy Policy

Version 1.0 | Effective: 1 February 2026 | AI Agent Sprint™ — an imprint of Sentient Sky Ltd

Plain-English Summary

We collect only what we need, use it only for stated purposes, never sell it, and give you full control over it. This policy explains what we collect, why, who we share it with, how long we keep it, and what rights you have — in every jurisdiction where we operate, including the UK, EU, USA (including California), Australia, and Canada.

1. Data Controller

Sentient Sky Ltd (Company No. 12222356, registered in England and Wales) is the data controller in respect of all personal data collected via aiagentsprint.com.

Privacy contact	[email protected]
General contact	[email protected]
Registered address	401 Coventry Road, Birmingham, B10 0SP, United Kingdom

A formal Data Protection Officer (DPO) will be appointed if required by law. Until then, all data protection enquiries are handled at the privacy contact above. We comply with the UK GDPR, EU GDPR, CCPA/CPRA, Australian Privacy Act 1988 (APPs), PIPEDA (Canada), and all other applicable data protection legislation.

2. Information We Collect

2.1 Information You Provide Directly

Contact information: Name and email address (via email capture forms, account registration, or purchase).
Purchase information: Name, billing address, order history. Payment card details are processed by Stripe — we do not store full card numbers.
Account credentials: Username, hashed password, login timestamps.
Communications: Content of emails, support messages, or any correspondence you send us.
Enterprise team data: Names and email addresses of team members added to an Enterprise account (up to 10 users).
Refund or dispute documentation: Any documentation you submit in connection with a support, refund, or chargeback request.

2.2 Information Collected Automatically

Technical data: IP address, browser type and version, operating system, device type, screen resolution.
Usage data: Pages visited, time on page, referral source, click paths, QR code scan records (page ID only — not individual identity).
Cookie and tracking data: See our Cookie Policy for full details.

2.3 Information from Third Parties

Payment confirmation data from Stripe.
Email engagement data from our email service provider (e.g., open rates, click events).
Advertising performance data (anonymised/aggregated) from platforms such as Meta, if advertising is active.

3. How We Use Your Information

Purpose	Legal Basis (UK/EU GDPR)	Examples
Fulfilling your purchase	Contractual necessity	Granting digital access, processing payment, issuing receipts
Account management	Contractual necessity	Login, resource access, download records
Email marketing and updates	Consent	Book launch news, new templates, newsletter
Transactional communications	Contractual necessity	Receipts, access credentials, account notifications
Customer support	Contractual necessity / Legitimate interest	Responding to enquiries, resolving disputes
Fraud prevention and security	Legitimate interest	Detecting abuse, chargeback prevention, account security
Website analytics and improvement	Legitimate interest / Consent	Understanding how visitors use the Site, improving content
Legal compliance	Legal obligation	Tax records, responding to lawful regulatory requests

We will never use your data for purposes incompatible with those stated above without seeking further consent or establishing a separate lawful basis.

4. Email Marketing & Communications

When you submit your email address (for example, to receive a free chapter or product updates), you consent to receive marketing communications from us. Every marketing email includes a clear, one-click unsubscribe link. We honour unsubscribe requests within 10 business days.

Transactional emails — including purchase receipts, access credentials, and account notifications — are sent as necessary to perform our contract with you and cannot be opted out of while your account is active.

Our email marketing complies with the CAN-SPAM Act (USA), the Privacy and Electronic Communications Regulations (UK), and the ePrivacy Directive (EU). We do not send SMS or WhatsApp marketing messages without your explicit consent. You may opt out at any time.

5. Data Processors & Third-Party Services

We do not sell, rent, or trade your personal data. We share data only with trusted service providers under appropriate data processing agreements:

Provider	Purpose	Location	Safeguards
Stripe / Polar	Payment processing / Merchant of Record	United States / Stockholm, Sweden	PCI-DSS Level 1; Standard Contractual Clauses (SCCs)
Email service provider (e.g., ConvertKit / Beehiiv)	Transactional and marketing email delivery	United States	SCCs; Data Processing Agreement (DPA)
Google Analytics (GA4)	Website analytics	United States	IP anonymisation enabled; SCCs
Cloud hosting provider	Site and infrastructure hosting	UK / EU / US	Encrypted transfer; DPA
Meta Platforms, Inc.	Advertising analytics (if active)	United States	SCCs; EU-US Data Privacy Framework

All third-party processors are contractually required to process data only on our instructions and in compliance with applicable law. We do not permit them to use your data for their own marketing purposes.

6. International Data Transfers

Some of our service providers are located outside the UK and EU. Where we transfer personal data to countries not recognised as providing adequate protection, we rely on appropriate safeguards:

UK International Data Transfer Agreements (IDTAs) or an Addendum to EU Standard Contractual Clauses;
EU Standard Contractual Clauses (SCCs) approved by the European Commission;
EU-US Data Privacy Framework where applicable.

You may request details of the specific transfer mechanism used for any provider by contacting [email protected].

7. Data Retention

Data Type	Retention Period	Reason
Account and purchase records	Account duration + 6 years	HMRC / tax obligations (UK Companies Act)
Payment records	6 years from transaction	Tax and financial regulation
Marketing consent records	Until unsubscribe + 2 years	Demonstrating lawful consent
Newsletter/marketing data	Deleted within 30 days of unsubscribe	Minimal retention principle
Analytics data	26 months (anonymised)	Standard GA4 retention; anonymised
Support correspondence	2–3 years from closure	Dispute resolution and legal risk
Refund/dispute evidence	6 years	Consumer law and chargeback protection

8. Your Rights — By Jurisdiction

Regardless of where you are, you can contact [email protected] to exercise any of the rights below. We will respond within 30 days (UK/EU), 45 days (US/California), or within the period required by your applicable law. We will not discriminate against you for exercising any privacy right.

8.1 UK & EU Residents (UK GDPR / EU GDPR)

Right of access (Art. 15): Obtain a copy of your personal data we hold.
Right to rectification (Art. 16): Correct inaccurate or incomplete data.
Right to erasure — “right to be forgotten” (Art. 17): Request deletion, subject to legal retention obligations.
Right to restriction of processing (Art. 18).
Right to data portability (Art. 20): Receive your data in a portable, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: At any time, without affecting the lawfulness of prior processing.
Right to lodge a complaint: With the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint, or your national EU supervisory authority.

8.2 California Residents (CCPA / CPRA)

Right to know: What categories of personal information we collect, use, and share.
Right to delete: Your personal information, subject to exceptions.
Right to correct: Inaccurate personal information.
Right to opt out of sale or sharing: We do not sell or share personal information for cross-context behavioural advertising.
Right to limit use of sensitive personal information.
Right to non-discrimination: We will not penalise you for exercising your rights.

California Requests

To exercise California rights, email [email protected] with subject line “CCPA Request.” We do not currently respond to automated Do Not Track (DNT) browser signals; please use this contact method to opt out.

8.3 Other US State Residents

Residents of states with enacted consumer privacy laws (Virginia, Colorado, Connecticut, Texas, and others) have the right to access, correct, delete, and port their personal data, and to opt out of targeted advertising. Contact us to exercise any such rights.

8.4 Australian Residents (Privacy Act 1988 / Australian Privacy Principles)

You have the right to access and correct your personal information. If you believe we have breached the APPs, you may complain to us first. If unresolved, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8.5 Canadian Residents (PIPEDA / Quebec Law 25)

You may access, correct, and withdraw consent for processing of your personal information. Quebec residents have additional rights under Law 25. Contact [email protected] to exercise these rights.

9. Children’s Privacy

The Site is directed at adults aged 18 and over. We do not knowingly collect personal data from children under 16 (or under 13 in the United States under COPPA). If we become aware we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have collected data from a minor, please contact us immediately at [email protected].

10. Security

We implement industry-standard technical and organisational measures including TLS/SSL encryption in transit, password hashing, access controls, and regular security reviews. We will notify you and relevant regulatory authorities of any data breach as required by applicable law (within 72 hours under UK/EU GDPR). However, no method of internet transmission is 100% secure.

11. FTC Compliance (USA)

In compliance with the FTC’s Final Rule on the Use of Consumer Reviews and Testimonials (effective October 2024):

All testimonials and endorsements on this Site represent genuine customer experiences;
No fake, fabricated, or AI-generated endorsements are used;
Non-typical results are disclosed where applicable;
Negative reviews are not suppressed or manipulated;
Any material connection between an endorser and Sentient Sky Ltd is disclosed;
No compensation is offered for reviews without full disclosure.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email to registered users and/or by a prominent Site notice at least 14 days before the change takes effect. The “Effective date” at the top of this policy will be updated accordingly.

13. Contact & Complaints

Privacy enquiries	[email protected]
General contact	[email protected]
Postal address	Sentient Sky Ltd, 401 Coventry Road, Birmingham, B10 0SP, United Kingdom

Version History

Version	Date	Notes
1.0	Feb 2026	Initial release — UK GDPR, EU GDPR, CCPA, APPs, PIPEDA compliant