Privacy Notice

This Privacy Notice explains how Gunslinger Speed Shop ("we", "us", "our") collects, uses and shares personal data when you use the Gunslinger Paint Diagnosis service (the "Service"). Gunslinger Speed Shop is the data controller for the personal data described below.

1. Personal Data We Collect

• Account data: name, email address, login credentials.
• Diagnosis content: photos you upload, generated diagnoses, chat messages with "Ask Gunslinger".
• Usage data: device identifiers, IP address, log data, feature usage.
• Support data: messages you send us and our responses.
• Billing data: handled by our payment provider Paddle (see Sharing below); we receive only basic transaction metadata.

2. Purposes & Legal Basis

• Provide and operate the Service, including authentication and diagnosis features — performance of contract.
• Provide customer support — performance of contract / legitimate interests.
• Improve, secure and monitor the Service, prevent fraud and abuse — legitimate interests.
• Send service-related communications — performance of contract / legitimate interests.
• Comply with legal obligations — legal obligation.

3. Sharing

• Paddle — our Merchant of Record, which processes payments, manages subscriptions, calculates and remits tax and issues invoices on our behalf.
• Hosting and infrastructure providers — to store data and run the Service.
• AI processing providers — to generate diagnoses and chat responses from your inputs.
• Professional advisers — legal, accounting, where necessary.
• Authorities — where required by law.

4. International Transfers

Personal data may be transferred outside the UK / EEA to service providers. Where this happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting and regulatory obligations. Diagnosis content you delete is removed from active systems within a reasonable timeframe.

6. Your Rights

Subject to applicable law (including UK GDPR / EU GDPR where relevant), you have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent where processing is based on consent. You also have the right to complain to your local supervisory authority (in the UK, the Information Commissioner's Office). We aim to respond to rights requests within one month.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and audit logging, to protect personal data.

8. Cookies

We use strictly necessary cookies to keep you signed in and to run the Service. We do not use advertising cookies. Limited analytics cookies may be used to understand usage; where required by law we will request your consent.

9. Contact

For privacy questions or to exercise your rights, contact Gunslinger Speed Shop via the support channels listed in the Service.