P11Vision

Last updated · 10 May 2026

Privacy Policy

P-Eleven Ltd ("we", "us", "P11 Digital") operates P11 Vision AI (the "Service"). This policy explains what personal data we collect, why we collect it, and how you can exercise your rights under the UK GDPR and the Data Protection Act 2018.

1. Who we are

Data controller: P-Eleven Ltd, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: privacy@p11digital.co.uk.

2. What we collect

  • Account data — email, password hash, brand name, optional profile details.
  • Content data — product images you upload, generation prompts, output videos.
  • Billing data — Stripe customer ID, plan, invoice history. Card details are handled by Stripe; we never see your card number.
  • Usage data — generation counts, login timestamps, IP address, browser/device strings, referrer URLs.
  • Cookies — see our Cookie Policy.

3. Why we process it

  • To provide and operate the Service (legal basis: contract).
  • To take payment and prevent fraud (legal basis: contract / legitimate interest).
  • To send service emails (legal basis: contract).
  • To send marketing where you have opted in (legal basis: consent — withdraw any time).
  • To comply with UK tax, accounting and AML obligations (legal basis: legal obligation).

4. Sub-processors

We use the following sub-processors. Each is contractually bound to confidentiality and adequate safeguards:

  • Supabase (auth, database, file storage) — EU/UK region.
  • Stripe (payments) — UK & EEA-compliant.
  • Anthropic (prompt enhancement via Claude) — content sent: style/platform/product hint strings only.
  • Railway (application hosting).
  • Cloudflare (DNS, edge caching).

5. International transfers

Some sub-processors process data outside the UK. We rely on UK Addendum + Standard Contractual Clauses where required.

6. Retention

  • Account & content data — for the lifetime of your account, plus up to 90 days after closure for backups and dispute handling.
  • Billing records — 7 years (UK accounting law).
  • Server logs — 30 days.

7. Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your personal data. Email privacy@p11digital.co.uk. We respond within one calendar month.

You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems is limited to named engineers with MFA. We run quarterly access reviews.

9. Changes

We may update this policy. Material changes are emailed to active users at least 14 days in advance.