Privacy policy
Last updated
This policy explains how Automation Club at automationclub.ai ("Automation Club", "we", "us") handles personal information. We collect as little as we can to run the club well, we never sell your information, and we do not use advertising trackers.
1. Who is responsible
Automation Club is responsible for your personal information. Contact us about anything in this policy at hello@automationclub.ai.
2. What we collect
When you create an account
- Your email address.
- Whether you ticked the newsletter box. The box is unticked unless you choose it.
- Sign-in records. We email you a 6-digit code or a link to sign in; our sign-in provider creates and checks these codes and keeps a record of sign-ins, including the IP address and browser used.
When you tell us about yourself
- "About you" answers: your roles, the use cases you care about, the AI tools you use and how comfortable you are with AI. These shape your recommendations. You can skip them or change them at any time.
- For members, the business profile: business name, what you sell, who you sell to, tone of voice and standard links. It pre-fills prompts for you.
When you use the library
- What you do with items: uses (copy, open in a tool, download), saves, collections, likes, ratings, requests and votes, shares, achievements and the weeks you were active.
- If you arrive through a link someone shared and sign up during that visit, we record that their link brought you in. No cookie is used for this. The person who shared it sees how many people their shares brought in. They do not see who you are.
- Values you type into a prompt's fill-in form are sent to our server to build your copy. They are not saved or logged.
- When you open an item in another tool, such as Claude or ChatGPT, the prompt text, including anything you filled in, is sent to that tool in a link. That tool handles it under its own privacy policy, and the link may stay in your browser history.
When you buy a membership
- Your plan, its status, renewal dates and payment history.
- Stripe, our payment processor, collects your payment details directly. We give Stripe your email address and an account reference. Stripe holds your name, billing address and any tax ID you add, and shows us the payment method type, card brand, last four digits and billing country. We never see or store your full card number.
When you email us
- Your message and the email address you send it from.
Technical information
- Our hosting, sign-in, payment and analytics providers receive your IP address, browser and device type when your browser talks to them. Our host keeps short-lived server logs for security and fixing problems.
- We measure visits with privacy-friendly analytics. See section 6.
3. What other people can see
- Your email address, About you answers and business profile are never shown to anyone else.
- Counts are public once they pass a threshold: how many accounts used, liked, saved or rated an item. They never show who.
- Your likes count toward an item's public like count. Saves stay private; only the total is shown.
- A collection is private until you make it public. A public collection can be seen by anyone with the link.
- Requests you post are public, without your email address. A short review you add to a rating is public too, shown without your email address.
4. Why we use it
| Purpose | Legal basis |
|---|---|
| Running your account, signing you in, giving you the items your plan includes | To provide the service you asked for (contract) |
| Taking payment, renewals, receipts and tax records | Contract, and our legal obligations |
| Recommendations, the business profile and pre-filled prompts | Contract |
| Sending the newsletter | Your consent, which you can withdraw at any time |
| Service emails: sign-in codes, a welcome email and important account notices | Contract, and our legitimate interest in running the club |
| Counting uses, likes and ratings, and improving the library | Our legitimate interest in running and improving the club |
| Keeping the site secure and preventing abuse and fraud | Our legitimate interest, and our legal obligations |
5. Emails
Service emails go to every account because the account needs them: sign-in codes and links, a welcome email, a note when a request you posted ships, and notices about your account, such as a price change or the club closing. Stripe sends receipts, renewal reminders and failed payment emails for memberships. The newsletter, and any series of tips about getting the most from the club, only goes to you if you ticked the box. Every newsletter has an unsubscribe link, and you can also email us to stop it. We do not track whether you open our emails or click their links.
6. Analytics
We use Umami Cloud to count page views and a few actions, such as starting sign-up or checkout, and to see which pages, links and campaigns bring people in. Umami Cloud sets no cookies, stores nothing in your browser and does not follow you to other sites. It receives your IP address to work out your country, along with your browser, device type, screen size and language. From each page address we send only the path, plus campaign tags on the page you land on, and we never send page titles, so sign-in links, share codes and other details never reach it. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent to Umami Cloud at all.
7. Who helps us run the club
We use these service providers. Each one only gets the information it needs for its job, and is bound to protect it.
| Provider | What it does | Information it handles |
|---|---|---|
| Supabase | Database, sign-in and file storage | Account, profile and activity information, and the IP address and browser used to sign in |
| Stripe | Payments, billing, fraud prevention, receipts and billing emails | Email address, payment and billing information, IP address at checkout |
| Resend | Sending sign-in, service and newsletter emails | Email address, newsletter choice, email content and delivery status |
| Railway | Hosting the site | Everything the site processes, and server logs |
| Umami Cloud | Cookieless visit counts | Page addresses, referrers, campaign tags, IP address (used to work out country), browser, device, screen size and language |
| Google Workspace | Our email inbox | Messages you send us |
Stripe also uses some payment information for its own fraud prevention and legal duties, under its own privacy policy.
We may also share information if the law requires it, to protect people or the club from harm or fraud, or with a buyer if the club is ever sold, in which case this policy keeps applying to your information.
We do not sell your personal information, and we do not share it for advertising.
8. Where your information is stored
Our providers store and process information mainly in the United States. Where information leaves the UK or the EU, we rely on safeguards the law recognises, such as standard contractual clauses.
9. How long we keep it
- Account, profile and activity information: while your account is open. When you delete your account, we delete it within 30 days and remove you from our email list, apart from what we must keep. Stripe keeps its payment records under its own policy.
- Payment and tax records: as long as tax and accounting law requires, which can be several years.
- Server logs: a short period, usually days to weeks.
- Analytics: Umami Cloud keeps visit records for 6 months. They are not linked to your name or email address.
10. Your choices and rights
You can:
- see, correct or export the information we hold about you;
- delete your account and its information;
- unsubscribe from the newsletter at any time;
- object to how we use your information, or ask us to limit it; and
- withdraw consent you gave, without affecting what we did before.
Email hello@automationclub.ai and we will reply within 30 days. We may need to confirm the request comes from you.
If you are in the UK or the EU, you can complain to your data protection authority. If you are in California or another US state with privacy laws, you have similar rights to know, correct and delete, and we will not treat you differently for using them. We do not sell or share personal information as those laws define it.
11. Children
Automation Club is not for anyone under 18, and we do not knowingly collect information about children. If you think a child has signed up, email us and we will delete the account.
12. Security
We protect your information with encryption in transit, access controls and providers with strong security records. Sign-in uses one-time codes, so there is no password to steal. No system is perfectly secure, so we will tell you without delay if a breach affects your information.
13. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or on the site before the change takes effect. The date at the top shows when it last changed.