Privacy Notice

1. Who we are

Stillpoint is operated by Vijay Aravindan Saravanan, trading as Stillpoint. We are the data controller for the personal data described in this notice — we decide why and how it is processed. You can contact us about privacy using the contact details published on this site.

2. What we collect and why

• Account data — email address, display name, login credentials or Google sign-in identifier. Used to create and secure your account. Legal basis: performance of our contract with you.
• Tool content — the priorities, notes, commitments and saved runs you enter. Used to deliver the tool and show your library. Legal basis: performance of our contract.
• Purchase and entitlement records — which tools you own, order reference and date. Used to unlock access and provide support. Legal basis: contract and legal obligation. Card details are never seen or stored by us; Paddle collects them.
• Communication preferences — your email nudge setting and timezone. Used to send the reminders you asked for. Legal basis: consent, withdrawable at any time in your library settings.
• Support messages — what you send us and our replies. Used to help you. Legal basis: legitimate interests in supporting customers.
• Technical and usage data — IP address, device and browser information, error reports, basic usage events. Used for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests in running a secure, working service.

3. Who we share it with

• Paddle.com — our Merchant of Record, for the sale of our products, payment processing, tax compliance, invoicing and refunds.
• Service providers and subprocessors — hosting, database and authentication infrastructure, email delivery, and error monitoring, acting on our instructions.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including in the UK, EEA, US and India. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account, tool content and preference data for as long as your account is active. If you delete your account, we delete or anonymise that data within 90 days. Purchase and tax records are kept for as long as the law requires (typically seven years).

6. Your rights

Depending on where you live, you may have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. Contact us to exercise any of these and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls in the database, and restricted administrative access. No system is perfectly secure, but we take this seriously.

8. Cookies

We use essential cookies and local storage to keep you signed in and to run checkout. These are required for the site to function. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will stop working.

9. Changes

We will post updates to this notice here with a revised date. See also our Terms & Conditions and Refund Policy.