Privacy Policy

1. Who is responsible

Spendjot Ltd is the data controller for personal data processed through CheckedName. Contact us about privacy at support@spendjot.app.

2. What we collect

Information you give us

• Account details: your email address, name and profile picture from the Google or GitHub account you sign in with. We never see your password.
• Searches: the project description, optional context (industry, audience, keywords and competitors) and your naming preferences.
• Workspace content: names you save and notes you add.
• Billing: your subscription status and Stripe customer ID. Card details go directly to Stripe and never reach our servers.

Information collected automatically

• Network information: we store a salted, one-way hash of your IP address to enforce guest and abuse limits. We don't store your raw IP address alongside your searches.
• Product events: for example search started, name saved or registrar clicked, so we can understand whether CheckedName is helping people find names.
• Technical logs: standard server logs kept briefly by our hosting provider for security and debugging.

3. Why we use it

• To provide the service (performance of a contract): running searches, checking availability, and saving your workspace.
• To keep the service safe (legitimate interests): rate limits, abuse prevention and fraud detection.
• To improve CheckedName (legitimate interests): aggregated product analytics.
• To bill you and meet legal duties (contract and legal obligation): payments, invoices and tax records.

We don't sell your personal data, and we don't use it for third-party advertising.

4. AI processing

To generate names, we send your project description and preferences to OpenAI through their API. Under OpenAI's API terms, this data isn't used to train their models. Please don't include confidential or personal information in descriptions that you don't want processed this way.

5. Availability checks

When we check a name, we send only the candidate name (for example sendora.com) to domain registries, DNS resolvers, GitHub and npm. Your description and identity are never included in these requests.

6. Who we share data with

We use the following service providers, each bound by a data processing agreement:

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. We may also disclose data if the law requires it.

7. Cookies and local storage

• Essential cookies keep you signed in. They are strictly necessary, so we don't ask for consent.
• Local storage in your browser remembers your last naming preferences. It never leaves your device unless you run a search.
• We don't use advertising or cross-site tracking cookies.

8. How long we keep data

• Account, searches, saved names and notes: until you delete them or close your account.
• Guest searches: up to 90 days.
• Live search progress data and availability caches: from minutes up to 6 hours.
• Billing records: as long as tax law requires, typically 6 years.

9. Your rights

Under UK and EU data protection law, you can ask to access, correct, delete or export your personal data, or object to and restrict certain processing. Email support@spendjot.app and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority.

10. Security

Data is encrypted in transit, and access is restricted with row-level security, so each account can only read its own data. Provider credentials never reach your browser. No system is perfectly secure, but we'll notify you and the authorities of any breach as the law requires.

11. Children

CheckedName isn't intended for anyone under 16, and we don't knowingly collect their data.

12. Changes

If we materially change this policy, we'll update the date above and notify account holders.