Privacy Policy
What ASPECT collects, why, who it is shared with, and your rights. This covers creators who use the platform, visitors to startaspect.com, and people who visit or buy on sites we host for creators.
1. Who is responsible for your data
- If you are a creator (you have an ASPECT account) or a visitor to startaspect.com: Murdoch's Dietary Limited is the controller of your personal information.
- If you visit, sign up or buy on a site we host for a creator: the creator is the controller of the information you give on their site. We process it on their behalf as their service provider, under the Terms of Service. The creator’s own privacy notice tells you how they use it. This policy explains our part.
2. What we collect
Creators
- Account: name, email, a hashed password (we can’t read it), your plan, and your Stripe account ID once you connect Stripe.
- Onboarding answers: what you do, your audience, platform, follower and email-list bands, goals, how you like to work, and anything you type in free text.
- Your site and products: everything you publish or upload, including images, videos, lessons, prices, discount codes and pages.
- Sales and billing: your orders, refunds, payouts status and platform fees, plus the subscription records for your ASPECT plan. Card numbers are entered on Stripe’s pages and go to Stripe; we store Stripe’s identifiers, amounts and statuses only.
- Insights: page views, sign-ups and orders on your site, with the page and the source they came from.
- Content and strategy: your content calendar, AI-generated ideas, strategist notes, call schedules and recaps.
- Support: messages you send us and our replies.
- Technical: IP address, browser type and timestamps in server logs, used for security and rate limiting and kept briefly.
Visitors to startaspect.com
- Pages you view and the technical log data above. If you log in or start building, a session cookie (see the Cookie Policy).
Visitors and buyers on creator sites
- Page views: the page viewed, the source (a tracking link’s
utm_sourceor the referring website’s domain) and the time. No cookie, no device fingerprint, no IP address stored with the view. - If you join an email list or waitlist: your email address and which page or product you signed up from.
- If you buy: the name and email you give at checkout, what you bought, the amount, and the status of the payment or subscription. Card details go to Stripe. If the product gives you a login, we store your email and a hashed password.
- If you leave a review: your name, rating and words, which the creator can publish.
- If you post in a community: your posts and comments, visible to other members of that site.
3. How we use it
- To run the Service: create your account, build and host your site, process payments and payouts, deliver downloads and access, show insights, run the content calendar and strategist services, and answer support.
- To generate your site, offer recommendations, estimates and content ideas with AI (section 4).
- To send service email: receipts, account and billing notices, access and password emails, and replies to your messages. If we send marketing email, you can unsubscribe from any message.
- To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
- To meet legal obligations, such as tax and payment records.
- To understand how the Service is used in aggregate and improve it. We don’t sell personal information and don’t use buyers’ data from creator sites for our own marketing.
4. AI
To write your site, recommend offers, produce estimates, rewrite sections and draft post ideas, we send the relevant inputs (your onboarding answers, your site’s existing text and the request you make) to Anthropic’s API. Under Anthropic’s commercial terms, data sent through its API is not used to train its models. We don’t send buyers’ personal information, card data or passwords to AI providers.
5. Who we share it with
- Stripe (payments, payouts, subscriptions, identity verification for connected accounts). Stripe is an independent controller for the data it collects at checkout; see Stripe’s privacy policy.
- Vercel (hosting, file storage for uploads, custom domains) and Turso (database), which store data for us under contract.
- Anthropic (AI generation, section 4).
- Email delivery providers that send service email for us.
- Our staff and contractors, including strategists, who need access to provide the Service and are bound by confidentiality.
- Creators: anything you submit on a creator’s site goes to that creator.
- Legal: when the law requires it, to protect rights, safety or property, or as part of a sale or restructure of our business (we will tell you if that changes who holds your data).
6. Where data is stored
We are based in New Zealand. Our providers store and process data in the United States and other countries where they operate. When data leaves your country we rely on our providers’ contractual safeguards and, where applicable, standard contractual clauses or equivalent mechanisms.
7. How long we keep it
- Account, site and buyer data: while the account is open, and for 30 days after it closes so it can be exported, then deleted.
- Payment, order and tax records: 7 years, as required for financial record-keeping.
- Server logs and security data: up to 90 days.
- Support conversations: up to 2 years after the last message.
- Backups: deleted data rolls off backups on their normal cycle, typically within 30 days.
8. Cookies
startaspect.com sets strictly necessary cookies only: a session cookie when you log in or start building, and one that holds the email you started with until you make your account. Creator sites set no cookies from us. Details in the Cookie Policy.
9. Security
Data is encrypted in transit and at rest with our providers. Passwords are hashed. Card data never touches our servers. Access to production systems is limited to the people who need it. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant regulator as the law requires.
10. Your rights
Wherever you are, you can ask us to:
- give you a copy of the personal information we hold about you;
- correct it;
- delete it (we will, except what we must keep by law or need to resolve a dispute);
- export it in a usable format;
- stop a particular use, including marketing.
Email support@startaspect.com. We will confirm your identity and respond within 20 working days, or sooner where the law requires. If your data was collected on a creator’s site, we will pass your request to the creator and help them respond, or deal with it directly where we can.
- New Zealand: you have these rights under the Privacy Act 2020 and can complain to the Office of the Privacy Commissioner.
- UK and EEA: our legal bases are performance of a contract (running your account and the Service), legitimate interests (security, improving the Service, service communications), consent (where we ask for it) and legal obligation. You can also object, restrict processing, and complain to your local data protection authority.
- California: we don’t sell or share personal information as defined by the CCPA, and we don’t discriminate against you for exercising your rights.
11. Children
The Service is for people 18 and over. We don’t knowingly collect information from children. If you think a child has given us data, email us and we will delete it.
12. Changes
We will update this policy when our practices change and show the date at the top. For material changes affecting creators we will give notice by email or in the dashboard.
13. Contact
Murdoch's Dietary Limited, trading as ASPECT, New Zealand. Email support@startaspect.com.