Effective 18 May 2026 · Version 2026-05-18-v1-draft
Town Planner Pro Ltd (company number 17225647), registered in England and Wales, is the data controller for personal data processed through the Town Planner Pro service. You can contact us at hello@townplannerpro.co.uk.
We do not run third-party analytics or tracking. We do not use marketing cookies.
Town Planner Pro offers AI-assisted features powered by third-party providers (currently including Anthropic, OpenAI and Google). The data flow depends on which access mode is active in Settings:
Included AI mode. When your subscription bundles AI access, AI calls are routed through Town Planner Pro's servers to a provider we manage on your behalf. Your prompts and the AI's responses transit our infrastructure. We log token counts per call for billing and fair-use enforcement; prompt and response contents are not intentionally stored in our persistent databases and are retained only to the extent technically necessary to deliver the response. Where we change the underlying provider and the change involves a sub-processor not already listed, we give at least 14 days' notice via our sub-processor page and by email. The relevant downstream AI provider is a sub-processor for the duration of each call and is bound by its own data-processing terms.
BYOK mode. When you supply your own API key for a supported provider, your key is stored only in this browser's local storage and is sent directly from your browser to your chosen AI provider. Your key never reaches our servers, and we do not receive or store the content of those prompts and responses; your relationship with the AI provider governs that processing.
You can switch between modes in Settings at any time. The decision affects only how AI calls are routed; subscription tier is set independently.
Service data is stored in Supabase (Postgres + Storage) hosted in the EU (eu-west-2, London). Payment data is processed by Stripe. Transactional email is sent via Resend. Application hosting is by Vercel. On the Included AI tier, prompts are routed to our managed AI provider (currently Google, Gemini). A current list of our sub-processors, with their locations and roles, is published at townplannerpro.co.uk/sub-processors.
Some sub-processors (notably Stripe and certain Vercel edge regions) may process data outside the UK/EEA. Where they do, transfers are governed by the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, supplemented by the sub-processor's own safeguards.
We retain account and service data for the duration of your subscription, and for a grace period after cancellation so you can re-activate. Cancelling your subscription does not by itself delete your data. When you request account deletion, your service data is hard-deleted within 30 days. Billing and accounting records are retained for the period required by UK tax and accounting law (currently 6 years). For the Included AI tier, usage records (token counts, status, and error codes only, never prompt or response content) are retained for up to 13 months to resolve billing disputes, then purged.
Under UK GDPR you have the right to: access your personal data, rectify inaccurate data, request erasure, restrict processing, object to processing, and data portability. To exercise any of these rights, email hello@townplannerpro.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
We use only strictly necessary and functional cookies and local storage for authentication, session management and your own preferences (including, in BYOK mode, your AI key, which is stored only on your device). We do not use analytics, advertising, or third-party tracking cookies.
We may update this Privacy Policy from time to time. The effective date and version above will change when we do. Where the change is material we will notify you by email or at next sign-in.
See also our Terms of Use. © Town Planner Pro Ltd · 18 May 2026