Privacy Policy

1. Who we are

BannerSelf is a product of Firswood Intelligence, a division of Firswood Digital Services Limited (company number 11608317), registered in England and Wales (“we”, “us”, “our”). If you have any questions about this policy, contact us at admin@bannerself.com.

2. What data we collect

We do not use cookies for advertising or behavioural tracking.

3. How we use your data

• Your LinkedIn URL and public profile data are used solely to generate your branding package.
• Your uploaded photo is used solely for banner and profile photo generation.
• If you create an account, your email and password are used for authentication and membership services. Passwords are cryptographically hashed and never stored in plain text.
• If you provide your email without creating an account, it is stored only with your explicit consent and used for product updates. You can request removal at any time.
• Payment is processed entirely by our payment provider. We do not store card numbers or financial details on our servers.

4. AI and automated processing

BannerSelf uses artificial intelligence to generate banner artwork, profile photos, and headline copy from your uploaded photo and LinkedIn profile data.

Your data is processed by third-party AI services under commercial API agreements. Under these agreements, your data is processed transiently and is not used to train AI models.

No solely automated decisions with legal or similarly significant effects are made about you. The AI is used only to produce visual and text assets for your branding package. You may request human review of any output by contacting us.

5. Third-party services

We use a limited number of third-party service providers to deliver BannerSelf. These providers process your data only as necessary to perform their function:

• AI processing providers — to generate banner artwork, profile photos, and extract profile information. Your photo and profile text are processed transiently and not retained by these providers.
• Payment provider — to process payments securely. Card details are handled entirely by the payment provider and never touch our servers.
• Cloud hosting and storage — to host the website and temporarily store generated files. Our primary storage is in the UK (London region).
• Email delivery provider — to send account verification and password reset emails.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. International data transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent transfer mechanisms approved under UK data protection law.

Our primary file storage is in the United Kingdom. Generated images and job data do not leave the UK for storage.

7. Data retention

• Generated images and job data are automatically deleted from our servers within 48 hours. We do not keep copies.
• Account data (email, hashed password) is retained for as long as your account is active. You can request deletion at any time.
• Email addresses provided without an account are retained until you request deletion.
• Payment records are retained by our payment provider in accordance with their privacy policy and UK financial record-keeping requirements.

8. Data security

All data in transit is encrypted via HTTPS/TLS. Files at rest are stored in encrypted cloud storage with server-side encryption. Access to systems is restricted using industry-standard authentication and least-privilege access controls. Passwords are hashed using strong cryptographic algorithms before storage.

9. Your rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Restrict processing — ask us to restrict how we use your data in certain circumstances
• Withdraw consent — where we rely on consent (e.g. email capture), you can withdraw at any time

To exercise any of these rights, email admin@bannerself.com. We will acknowledge your request within 30 days and respond fully within one calendar month.

10. LinkedIn data

We access only publicly available LinkedIn profile information (such as name, headline, and experience). We do not access private messages, connections, or any data that is not visible on your public profile. Profile data is used solely to personalise your branding package and is deleted within 48 hours.

11. Children

BannerSelf is not directed at anyone under 18. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated “last updated” date. Continued use of BannerSelf after changes constitutes acceptance.

13. Contact

Firswood Intelligence, a division of Firswood Digital Services Limited (company number 11608317)
Email: admin@bannerself.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).