Speechcraft

Speechcraft - Privacy Policy

Last updated: 13 May 2026

This Privacy Policy explains how Speechcraft collects, uses, and protects your personal data when you use our website (speechcraft.co) and our AI-powered speech-writing service ("the Service").

We take your privacy seriously. We've written this policy to be clear and readable. If you have any questions, contact us through the website speechcraft.co.

1. Who we are

The data controller for personal data collected via the Service is Empiire Ltd, a company registered in England and Wales under company number 17196333, with registered address at Empiire Ltd, Summit House, 10 Waterside Court, Newport, NP20 5NT, United Kingdom, trading as Speechcraft.

If you live in the UK or EU, you have specific rights under UK GDPR and EU GDPR, which are explained below.

2. What personal data we collect

We collect the following categories of information from you:

Information you provide through the speech form:

  • Names and details of the people the speech is about (couple, family, friends mentioned)
  • Personal anecdotes, stories, and information about the people and event
  • Wedding details (date, venue type, vibe, audience notes)

Information you provide at payment:

  • Your email address
  • Your first name
  • Payment details (these are processed by Stripe and not stored by us)

Information collected automatically:

  • Anonymous usage and analytics data (which pages you visited, how long you spent, what device and browser you used)
  • Basic technical information needed to operate the website (your IP address is briefly held by our hosting and analytics providers)

We do not collect special category personal data (like health data, religion, or political views) unless you choose to share it through the form (for example, mentioning a person's religious context in the speech). Where you do share such information, you are giving us explicit consent to use it solely to generate your speech.

3. How we use your data

We use your data for the following purposes:

To provide the Service - generating your speech using AI, processing your payment, and delivering the speech to you.

To communicate with you about your purchase - sending you the receipt, the speech itself, and any necessary updates about your order. These messages are transactional and are necessary to fulfil our contract with you.

To send you related communications - under the UK PECR "soft opt-in" exemption (Regulation 22(3)), we may occasionally email you about new Speechcraft features, related speech types, or improvements to the Service. You can unsubscribe at any time using the link in any such email. We will never share your email with third parties for their marketing.

To improve the Service - we may analyse anonymised and aggregated information about how the Service is used and how speeches perform, in order to refine our AI prompts and improve quality. This data is stripped of identifying details.

For legal and security reasons - to comply with legal obligations, prevent fraud, and protect the security of our systems and users.

4. Legal bases for processing

Under UK and EU GDPR, we rely on the following legal bases:

  • Contract: most of what we do (generating your speech, taking payment, delivering the result) is to perform the contract you entered into when you purchased.
  • Legitimate interests: improving the Service and (in a limited way) emailing past customers about related services.
  • Consent: where you choose to share special category data through the form, and for any marketing communications outside the soft opt-in exemption.
  • Legal obligation: where we have to retain certain records by law.

5. Who we share data with

We share your data only with these categories of recipients:

  • Stripe - for payment processing. Stripe is a PCI-compliant payment processor with its own privacy policy at stripe.com/privacy.
  • Anthropic - our AI provider. Your form responses are sent to Anthropic's API to generate the speech. Anthropic processes this data as a sub-processor and does not retain it for their own use. See anthropic.com/legal for their data handling commitments.
  • Supabase - our database and storage provider, who stores your form responses and the generated speech securely on our behalf.
  • Lovable / our hosting provider - who runs the website and email infrastructure.

We do not sell your personal data to anyone. We do not share your data for advertising or marketing purposes with any third party.

If we are ever required by law (court order, regulatory request) to disclose data, we will do so only to the minimum extent legally required.

6. International transfers

Some of our service providers (e.g. Anthropic, Stripe) are based outside the UK and may process your data in countries with different data protection standards. Where we transfer data internationally, we rely on standard contractual clauses or other safeguards required under UK GDPR.

7. How long we keep your data

  • Speech form data and generated speeches: retained while your account exists or for up to 12 months after delivery, unless you request earlier deletion.
  • Payment and transaction records: retained for 6 years to comply with UK tax law.
  • Marketing email lists: retained until you unsubscribe or for 3 years after your last interaction, whichever is sooner.
  • Anonymised aggregate data: may be retained indefinitely (no longer identifiable to you).

8. Your rights

Under UK and EU GDPR, you have the right to:

  • Access the personal data we hold about you (a "subject access request")
  • Rectify any inaccurate data
  • Erase your personal data (the "right to be forgotten"), subject to legal retention requirements
  • Restrict or object to processing of your data
  • Portability - receive your data in a portable format
  • Withdraw consent at any time, where we rely on consent

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) - the UK regulator - at ico.org.uk if you are unhappy with how we have handled your data.

9. Cookies and analytics

The Service uses a minimal number of cookies necessary for the website to function (such as session cookies). We may use analytics cookies (e.g. Google Analytics) to understand how the Service is used in aggregate. These are anonymised and do not identify you personally.

Session analytics. We use Microsoft Clarity to understand how visitors use our site. Clarity records anonymised sessions including mouse movements, scrolls, and clicks, and produces heatmaps showing aggregate user behaviour. This helps us identify friction in our forms and improve the product. Clarity does not record sensitive form inputs by default, and the data is used only to improve the Speechcraft experience. You can read Microsoft's Clarity privacy notice at https://learn.microsoft.com/en-us/clarity/faq.

If we add any additional tracking in future, we will update this Privacy Policy and request your consent where required.

10. Security

We take reasonable steps to protect your personal data, including:

  • All data is transmitted over HTTPS
  • Form responses and generated speeches are stored in secure private storage on Supabase
  • Payment data never touches our systems - it is handled directly by Stripe
  • Access to customer data is restricted to authorised personnel only

No system is completely secure, but we follow standard industry practices to keep your data safe.

11. Children

The Service is not intended for use by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data through the Service, please contact us and we will delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at speechcraft.co/privacy with the "Last updated" date at the top.

13. Contact

For any privacy questions, requests, or concerns, please contact us through the Speechcraft website speechcraft.co.