Privacy Policy

The data controller is DIGITAL HUMMINGBIRD LIMITED, registered in England, United Kingdom, at 8 Thames Close, Farnborough, England, GU14 9ND, United Kingdom. For any privacy question or request, contact support@digihumm.shop.

• Account data: name, email address, and authentication identifiers.
• Billing data: subscription plan, billing status and partial card metadata returned by Stripe. We never receive or store your full card number.
• Studio inputs: the launch briefs you type (what you're launching, audience, vibe, channels) and any reference files you choose to upload.
• Generated results: the brand plans, asset previews and teaser configurations produced for you.
• Support data: messages you send us and the leads captured from our contact and workspace forms.
• Technical data: IP address, device/browser type, and essential cookies needed to run the service.

We collect data directly from you (forms, briefs, uploads), automatically from your device (essential cookies, logs), and from our payment processor Stripe (subscription and payment status). We do not buy personal data from third parties.

• Provide the studio (generate and deliver your assets) — performance of a contract.
• Process subscriptions and prevent payment fraud — contract and legal obligation.
• Support and communication — legitimate interests and contract.
• Service security and improvement — legitimate interests.
• Legal compliance (tax, accounting) — legal obligation.

Your briefs and uploaded reference files are processed only to generate the assets you request. Generated results are stored so you can return to them and export your Launch Kit.

We do not use your inputs, uploads or generated results to train AI models. Uploaded reference files are retained only as long as needed to produce your assets and are then cleared, by default within 30 days, as described in our Content License. You can request earlier deletion at any time.

We share personal data only with processors that help us run the service, under data-processing agreements:

• Hosting & delivery: Vercel Inc. (application hosting and content delivery).
• Payments: Stripe, Inc. (subscription billing; receives your card details directly).
• Database & storage: Supabase (account, lead and asset storage).
• AI generation: our model-generation provider, used solely to produce your requested assets and contractually barred from training on your data.

We do not sell your personal data.

Some processors are located outside the UK/EEA (for example, in the United States). Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum) to protect it.

• Account data: for the life of your account and up to 12 months after closure.
• Uploaded reference files: until your assets are produced, then cleared (default within 30 days).
• Billing records: as required by UK tax/accounting law (typically 6 years).
• Support and lead data: up to 24 months from last contact.

You have the right to access, rectify, erase, restrict or object to processing, and to data portability. You may withdraw consent at any time where processing is based on consent. To exercise any right, email support@digihumm.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.

California residents may request disclosure of the categories and specific pieces of personal information we hold, request deletion or correction, and are entitled to non-discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. To make a request, email support@digihumm.shop.

We use essential cookies required to operate the studio and keep you signed in. See our Cookie Policy for details and choices.

The studio generates creative assets on request but does not make legal or similarly significant automated decisions about you. Hummingbird is not for children: the service is not available to anyone under 13, and users aged 13–17 must have verifiable parental or guardian consent.

We use encryption in transit, access controls and reputable infrastructure providers. No method of transmission is perfectly secure, but we work to protect your data and will notify you and regulators of any qualifying breach as required by law.

To reach our data controller, or to raise a concern before contacting a regulator: