Data protection statement

Controller

• Data controller: JHAI, a sole trader trading as Conversation Piece.
• Based in: Ashbourne, Derbyshire, United Kingdom (this is our general location, not a postal address).
• Privacy and support email: hello@conversationpiece.app
• Postal address for written correspondence: to be added.

Our principles

• We collect only what the service needs and use it only for the purposes in our Privacy notice.
• Each customer's library, history and subject memories are private to their account; other customers cannot see them.
• Conversation minutes and payments are recorded only by our server, never by your device, so balances cannot be altered.
• Minutes from payments are credited only after a payment confirmation that we verify cryptographically.

Security

• Data is encrypted in transit; database access is restricted per account.
• Passwords are stored as secure hashes. We never see your full card details.
• Administrator access requires two-step verification and is logged.
• Voice calls use short-lived sessions created on our server and removed after use.

Retention in practice

• Deleting your account removes your profile, library, preferences, subject memories, recent searches and recently viewed subjects.
• Recent searches and recently viewed subjects are capped at your newest ten of each.
• Payment, invoice and minute-usage records are kept as needed for accounting and tax law.
• Trial and promotion eligibility is kept as a restricted scrambled email fingerprint to prevent repeat claims; it is still personal data and is never included in public views.
• Deleting your account does not automatically delete copies held by the payment processor under its own legal obligations.

Making a request

Use the download and delete controls on your Account page, or email hello@conversationpiece.app. We may need to confirm your identity. We reply within one month, or tell you if we need up to two further months for complex requests. You do not need to delete your account to make a request.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Data breaches

If a breach is likely to put your rights at risk we will report it to the ICO within 72 hours where required and tell you without undue delay where the risk is high.