Privacy and your data

What we record, who processes it, and your rights.

  • Every page is encrypted over HTTPS. Sign-in is handled by Clerk, so we never see your password. Payments go through Stripe; we never store full card numbers.
  • We never sell your data.
  • When someone visits your profile we record the visit (time, device, browser, country and link clicks) for your analytics. IP addresses are removed after 7 days, and raw analytics events are kept for 13 months.
  • Companies that process data for us: Clerk, Stripe, Vercel, Cloudinary and Resend.
  • To get a copy of your data or use any other UK GDPR right, email hello@ipaha.co.uk.

See the privacy policy for details.

Still stuck?

Jema, our assistant, can walk you through it, or pass you to the team.