Privacy Policy

Ready Pip ("Ready Pip", "we", "us") is an AI marketing assistant for small hospitality businesses. It helps venue owners create and schedule social media content, manage online reviews, and understand their marketing performance through a conversational assistant called Pip.

Ready Pip is operated by Charlotte Andrews, United Kingdom [legal entity name and company number to be added on incorporation], who is the data controller for the personal data described in this policy.

Contact: charlotte@readypip.com

1. What this policy covers

This policy applies to the Ready Pip mobile app and the connected services it uses on your behalf (for example your Instagram professional account, once you connect it). It does not cover the privacy practices of the platforms themselves — Meta, Google, and others have their own policies.

2. Information we collect

Account information. Your name, email address, and details about your venue (name, type, location) that you give us when you set up Ready Pip.

Content you provide. Messages you exchange with Pip, photos you upload, captions and posts you create or approve, brand assets, and scheduling preferences.

Connected platform data (Meta Platforms). When you connect an Instagram professional account, we access — through Meta's official Instagram Platform API and only with your authorisation — your account ID and username, your media (posts, captions, and media identifiers), audience and content insights (such as reach, impressions, likes, comments, and follower counts), and the access token that lets Ready Pip publish posts you have approved.

Review data. When you connect a review service (such as a Google Business Profile), we access the reviews left on your venue so Pip can notify you and draft replies for your approval.

Technical data. Device type, app version, log and diagnostic data generated when you use the app.

3. How we use your information

• To provide the service: drafting content, scheduling and publishing posts to your connected accounts, drafting review replies for your approval, and answering your questions about performance.
• To operate, secure, troubleshoot, and improve Ready Pip.
• To communicate with you about the service.
• To comply with legal obligations.

We do not sell your personal data, and we do not use data obtained from Meta's platforms ("Platform Data") for advertising, surveillance, or any purpose other than providing the Ready Pip features you have asked for. We do not transfer Platform Data to data brokers.

4. AI processing

Pip is powered by large language models provided by Anthropic. Your chat messages, uploaded photos, review text, and performance data may be sent to Anthropic's API to generate content and answers. Under our agreement with Anthropic, this data is not used to train Anthropic's models. Ready Pip does not make automated decisions about you that have legal or similarly significant effects — every post and review reply is approved by you before it is published.

5. Legal bases (UK GDPR)

We process personal data on the following bases: performance of a contract (providing the service you signed up for), consent (connecting your social and review accounts — which you can withdraw at any time by disconnecting them), legitimate interests (securing and improving the service), and legal obligation where applicable.

6. Who we share data with

We use a small number of service providers to run Ready Pip:

Provider	Purpose	Location
Supabase	Database and file storage	London, UK (EU region)
Railway	Application hosting	EU/US
Anthropic	AI model processing (see section 4)	US
Meta Platforms	Publishing and insights for accounts you connect	Global
Expo	App delivery and updates	US

Each provider processes data only to provide its service to us. We may also disclose information where required by law. Where data leaves the UK, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum, or adequacy regulations).

7. Data retention

We keep your data for as long as your account is active. When you delete your account or ask us to delete your data, we remove it within 30 days; residual copies in encrypted backups are purged within 90 days. Access tokens for connected platforms are invalidated as soon as you disconnect the account or delete your account. We may retain limited records where the law requires it (for example billing records).

8. Security

Data is encrypted in transit. Access tokens and credentials are stored securely and access to production systems is restricted. No system is perfectly secure — if a breach affects your data we will notify you and the ICO as required by law.

9. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. To exercise any of these rights, email charlotte@readypip.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

10. Deleting your data

See our Data Deletion Instructions for step-by-step options, including how to disconnect your Instagram account and how to request full deletion of everything Ready Pip holds about you.

11. Children

Ready Pip is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant we will tell you in the app or by email.

13. Contact

Questions about this policy or our data practices: charlotte@readypip.com