Privacy Policy

Last updated: September 2026

Who we are

intentdocs.com is operated by IntentDocs Limited, a company incorporated in England and Wales, with registered address at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

Contact: support@intentdocs.com

What data we collect

Account data: When you create an account, we collect your email address and any profile information you provide (name, username). This is managed by Clerk.

Project data: Your product ideas, blueprints, story maps, and associated content that you create on the platform.

Usage data: With your consent, we use PostHog analytics to collect information about how the platform is used — pages visited, features used, session duration — and session recordings of your visit (see “Session recordings” below). Before you make a cookie choice, we collect only anonymous, cookieless usage and error events that store nothing on your device and are not linked to you across visits. If you reject analytics, PostHog collection stops entirely.

Payment data: Payments are processed by Stripe. We store your Stripe customer ID and subscription status but never have access to your card details.

Communications: If you subscribe to our newsletter, we store your email address via Resend.

How we use your data

• To provide and improve the intentdocs.com service
• To process payments and manage your subscription
• To send transactional emails (account notifications, receipts)
• To send the newsletter, if you have subscribed (you can unsubscribe at any time)
• To understand aggregate usage patterns and improve the product (analytics, with consent only)

Legal basis for processing (UK GDPR / EU GDPR)

Contract performance: Processing necessary to provide the service you've signed up for (account data, project data, payments)

Consent: Analytics cookies, session recordings, and newsletter (you can withdraw consent at any time)

Legal obligation: Financial records retained for 7 years as required by HMRC

Legitimate interests: Error monitoring for service integrity (Sentry, and PostHog error diagnostics), and anonymous cookieless usage measurement before you make a cookie choice. You can object at any time.

Data retention

• Account and project data: retained for as long as your account is active. Deleted immediately when you delete your account.
• Payment records: retained for 7 years as required by UK tax law (HMRC)
• Analytics data: retained per PostHog's retention policy (2 years)
• Session recordings: retained per PostHog's session replay retention policy (a much shorter window than analytics events), then deleted automatically

Your rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the data we hold about you
• Rectify inaccurate data
• Erasure — delete your account and all associated data at any time from Settings → Account
• Restrict processing
• Data portability
• Object to processing based on legitimate interests

To exercise any right, contact us at support@intentdocs.com.

Cookies

We use two types of cookies:

Functional cookies (always active): Session cookies and login state (managed by Clerk). These are essential for the service to work and do not require consent.

Analytics cookies (consent required): PostHog uses cookies to recognise you across visits. These are only set if you click “Accept” on the cookie banner — until then PostHog runs cookieless and stores nothing on your device.

Session recordings

With your consent (clicking “Accept” on the cookie banner), we use PostHog session replay to record how the interface is used during your visit — clicks, scrolling, navigation, and the screens you see. Recordings only ever start after you accept: if you have not made a choice, or you reject, nothing is recorded. Text you type into input fields is masked by default. Recordings are stored by PostHog on EU servers and used solely to diagnose usability problems and improve the product. You can withdraw consent at any time by clearing cookies for intentdocs.com or contacting support@intentdocs.com.

Third-party services

We use the following third-party services, each with their own privacy policies:

• Clerk — authentication and user management
• Supabase — database (hosted in EU)
• Stripe — payment processing
• PostHog — analytics and session recordings (with consent), plus error diagnostics (EU-hosted)
• Sentry — error monitoring (service integrity)
• Resend — transactional email and newsletter
• Vercel — hosting (edge network)
• Anthropic — AI blueprint generation (your project descriptions are sent to Anthropic's API to generate blueprints)

Note on AI processing: When you use the blueprint generation feature, your product idea and discovery answers are sent to Anthropic's Claude API. Anthropic's data processing is governed by their privacy policy. We do not use your data to train AI models.

Which subprocessors see your project content

Most of the services above only ever see account or billing metadata. A smaller set is designed to receive the actual content of your product ideas, story maps, and prompts:

• Anthropic — receives your content: your product idea, discovery answers, and story map text are sent as prompts to generate blueprints.
• Supabase — receives your content: it is our primary database, so it stores your project data and story maps directly.
• Sentry — may receive fragments of your content if it is present in an error message or an error-linked session replay; we scrub emails and API keys/tokens from everything Sentry receives before it is sent (see “Session recordings” above for replay sampling).
• PostHog — metadata only, not your content. Our AI usage tracking runs in privacy mode: PostHog records that a generation happened (model, cost, latency, token counts) but never the prompt or completion text itself. Product analytics events do not include project content either.
• Clerk, Stripe, Vercel, Resend — metadata only (identity, billing, hosting, email delivery). None of these receive your product ideas or story map content.

Changes to this policy

We'll notify users of material changes via email or an in-app notice.

Contact

Questions about this policy: support@intentdocs.com

ICO Registration: Pending (application submitted to ico.org.uk)