Privacy Policy

The data controller is CHRIS S WOOD LTD, 8 Toms Close Collingtree, NN4 0NL, England. For any privacy question, contact support@chrswoo.shop or +44 7863936695.

We are the controller for the personal data described here and are responsible for it under UK GDPR and, where applicable, EU GDPR and the CCPA/CPRA.

Account and billing data: name, email and subscription status. Card payments are processed by Stripe — Stripe never gives us, and we never receive or store, your full card number, CVC or expiry.

User input: the show descriptions, act details, line-up, set length, venue notes and preferences you type into the workspace.

Generated outputs: the stage plots, lighting cues, run-of-show, input lists, posters, hype reels and Show Pack files produced for you.

File uploads and example data: any venue photos, logos or set-lists you choose to upload for a generation, and any example brief you load.

Support and lead data: messages sent through our contact and venue-readiness forms.

Technical data: IP address, device and browser type, and essential cookies.

We collect personal data from these collection sources only:

Directly from you: when you create an account, subscribe, type user input into the workspace, upload a file, or send a contact or venue-readiness form.

Automatically from your device: IP address, browser and device type and strictly necessary cookies, collected when you use the site.

From our payment processor: Stripe passes us subscription status, the outcome of a payment, and truncated card metadata such as the last four digits and card brand. Stripe never passes us your full card number.

Generated by the service: the outputs the tool produces from your user input.

We do not buy personal data, and we do not collect it from data brokers, public scraping, social networks or any third-party advertising source.

To provide the tool (generate and export your Show Pack) — performance of a contract.

To take payment and manage subscriptions — performance of a contract and legal obligation.

To provide support and respond to enquiries — legitimate interests and, for leads, your consent.

To secure, maintain and improve the service — legitimate interests.

To meet legal, tax and accounting duties — legal obligation.

We do not use your inputs, outputs or uploads to train AI models.

User input. The show description and details you type are user input. We process user input for one purpose only: to generate the production brief and deliverables you asked for. Your user input is not used to train, fine-tune or improve any AI model, ours or anyone else's. We do not sell user input, and we do not share it for advertising.

AI provider boundary. Where an external AI provider is used to enrich promo copy, only the minimum necessary text from your user input is sent, under a data-processing agreement that prohibits training on it. The provider acts as our processor and may not reuse the text for its own purposes.

Generated results. Outputs generated from your user input are stored against your account so you can re-download them. They are deleted when you delete them, when you close your account, or on request.

File uploads and example data. Venue photos, logos and set-lists you upload are processed solely to fulfil the generation you requested, are cached for up to 30 days, and are then automatically cleared. Example briefs you load are treated as user input.

Deletion. You can delete your user input, generated results and uploads at any time from your account, or by emailing support@chrswoo.shop. We action deletion requests within 30 days. Backups are purged on their normal rotation.

We do not claim ownership of your uploads — see our Content License.

We share personal data only with processors that help us run the service:

Hosting and delivery: Vercel (application hosting and CDN).

Payments: Stripe (subscriptions, invoices, refunds and disputes).

Database, authentication and storage: Supabase.

AI provider: where configured, a text model provider used to enrich promo copy only.

Email: our support mailbox provider for replies.

We may also disclose data where required by law. We do not sell personal data.

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum where relevant) to protect it.

Account and subscription records: for the life of your account and up to 7 years afterwards to meet tax and accounting duties.

Tool inputs and generated outputs: while your account is active so you can re-download them; deleted on account closure or on request.

Uploaded files (venue photos, logos, set-lists): cached up to 30 days, then cleared.

Support and lead messages: up to 24 months.

Subject to law, you can access, correct, delete, port or restrict your personal data, and object to certain processing. Where we rely on consent, you can withdraw it at any time.

If you are in California, you have the right to know, delete and correct your personal information, and to non-discrimination for exercising these rights.

To exercise any right, email support@chrswoo.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

We do not sell or share personal information for cross-context behavioural advertising as defined by the CCPA/CPRA. There is nothing to opt out of because we do not engage in these practices.

We use strictly necessary cookies for sign-in and security, and privacy-respecting, aggregate usage measurement. See our Cookie Policy for detail. We do not run cross-site advertising trackers.

Callboard generates creative drafts from your inputs; these are suggestions for you to review and are not decisions producing legal or similarly significant effects about you.

The service is not for children under 13. Users aged 13–17 must have verifiable consent from a parent or guardian. If you believe a child has provided us data, contact us and we will delete it.

We use encryption in transit, access controls and reputable processors to protect data. No method is perfectly secure, but we work to protect your information and will notify you and regulators of a qualifying breach as required.

We may update this policy; material changes will be posted here with a new date.