Privacy Policy

Last updated: 10 July 2026. Written for a UK-based operator under UK GDPR / the Data Protection Act 2018.

Who we are. AltoScribe ("we", "us") provides a WordPress/WooCommerce plugin and a hosted API that generate product descriptions from your products' data. The data controller is The Really Useful App Company Ltd (company no. 17088198), Chandos House, School Lane, Buckingham, England, MK18 1HD. For data-protection queries contact privacy@thereallyusefulappcompany.com.

What we process and why

When you generate a description (individually or in bulk), the plugin sends the following to the AltoScribe API. Nothing is sent until you click Generate or start a bulk run:

Data	Purpose	Lawful basis (UK GDPR)
Product name, attributes, and categories (plus any tone/length/keyword inputs you set)	Generate a short and long description	Contract (Art. 6(1)(b)) — providing the service you installed
Site ID (a hash of your site URL)	Count usage against your plan and credit balance	Legitimate interests (Art. 6(1)(f)) — billing integrity and abuse prevention
Licence key, billing details	Manage your subscription and credit packs	Contract; legal obligation (tax)

Product data is normally commercial information, not personal data. We do not ask for or require your customers' personal data to generate descriptions; if such data incidentally appears in a product's fields, we process it only to return the requested description and do not use it to train models. The plugin removes its stored settings and data on uninstall.

Sub-processors

Anthropic — provides the AI that generates the text. Product name, attributes, and categories are sent to Anthropic to produce a result and are not used by them to train models under their commercial terms.
Render — hosts the AltoScribe API.
Freemius — our merchant of record for paid plans and credit packs; it processes your billing details and is the seller of record for tax purposes.

Where any sub-processor processes data outside the UK, we rely on appropriate safeguards (UK International Data Transfer Agreement / Addendum).

Retention

Generated text is returned and not stored beyond what's needed to serve the request and logs.
Usage counts and credit balances are kept per site/account for billing and abuse prevention.
Operational logs are kept for a limited period (e.g. 30 days) and then deleted.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, object to processing, or complain to the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, contact privacy@thereallyusefulappcompany.com.

Security

Data is sent over HTTPS. Access to the AltoScribe API and its data is restricted. The plugin sends a hashed site ID rather than identifying your site directly.

Changes

We'll update this policy as the service evolves and post the new version here with a revised date.