Privacy policy

This policy explains how All on Show handles personal data under UK GDPR and the Data Protection Act 2018.

1. Who we are

Operator name and business address: Legal business details.

The service is All on Show at allonshow.com (United Kingdom). For privacy requests email support@allonshow.com.

2. What we collect

For the owner business overview, we keep daily service totals such as successful generations, failures, image refreshes and export approvals. With your optional storage choice enabled, we also count setup step visits and image acceptance days. These summaries contain no prompts, photos or contact details and expire after 100 days. Temporary keyed identifiers used to prevent duplicate optional counts expire after two days. You can turn optional counts off through Cookie and storage choices. We do not sell analytics data.

Depending on how you use All on Show, we may process:

• Email address when you sign in with a code
• Display name if you save one in settings
• Payment and subscription details via Stripe (we do not store full card numbers)
• Your logo and text you enter; the logo stays in this browser
• Business details and optional briefs submitted to create AI drafts
• Monthly AI image usage linked to your signed-in account, including image refreshes
• Preferences stored on your device (brand colours, business details, saved post ideas, free share count)
• Basic technical logs (for example IP and device type) for security

3. Why we use it

To run sign-in and plans, show your posts back to you, take payment, stop abuse, create drafts when you ask, and (only if you tick the box) send product tips. Bases include contract, legitimate interests, and consent where the law asks for it.

Content safety and reports

All on Show checks submitted prompts, generated wording, image directions, supported generated-image categories and wording submitted for export using OpenAI moderation. Your optional brand style description is also checked and used when planning new images. Final wording may include business contact information. Uploaded photos and logo files are not sent for these checks. Image checks do not reliably detect hateful text or symbols within images.

Only flagged content is retained for human review, including the account email, business name when supplied, text, reason, review decisions and the flagged generated image when available. In production, report records are encrypted in our private database and flagged image review copies are held in private file storage. Only the authorised owner can retrieve reports and review images through All on Show. Review copies are resized to reduce storage, not silently discarded at the 100 MB warning level. Reports expire after 90 days and expired review images are removed by scheduled cleanup. New image generation pauses near the safety storage limit, before requesting an AI image. Account restrictions remain until restored by the owner. Access to real reports and images is restricted to the authorised owner. Automated flags are not findings of misconduct and can be appealed at support@allonshow.com.

4. AI writing and artwork

When you request drafts, we send OpenAI your business name, trade, area, services, work details, posting preferences, claims to avoid and any extra brief you enter. We do not send your phone number or logo file in that request. Drafts also go through an AI writing check using those same details. Suggestions are shown with your editable draft; no automatic rewriting loop runs. Image generation does not happen while the post ideas are written or on the image-source page. If you choose a new AI image, it starts when you continue to the image preview page. We use your post subject, selected heading and supporting line (including saved edits), trade, services, supplied work details and recent visual descriptions to plan an image direction. We retain up to eight recent visual directions per business for up to 90 days after the latest request, linked to a hashed account and business identifier, to reduce repetition. We send the planned image direction and colour codes from your logo to create the background; your logo file and phone number are not sent for image planning or generation. A photo you upload is resized on this device and stays in your browser. A border and edge gradient are added locally. Uploaded photos are not sent to the AI service. All on Show sets the Responses API storage option to off. OpenAI says API inputs and outputs are not used to train its models by default, and that abuse-monitoring logs may retain content for up to 30 days. See OpenAI’s API data controls. Avoid entering sensitive personal information in a draft brief.

5. Who we share with

We use suppliers to host the site (Vercel), send email codes (Resend), create requested AI writing and artwork (OpenAI), track image allowances (Upstash Redis in production, using a hashed account identifier), and take payment (Stripe). Platform logos in the share list are served by All on Show with the rest of the website. We do not sell your personal data.

Saved business profile

Your business name, phone, service area, trade, services and writing preferences are saved to your verified account so you can use them on another device. These profile records are encrypted in account storage on Upstash in production. We use them to provide the service under our contract with you. You can edit them in Profile → Business details or remove them in Security & data. They are kept until you remove them or request account deletion. Logos, uploaded photos and generated post drafts are not part of this account sync and remain in your browser. Older unlinked browser drafts are not automatically assigned to a signed-in account.

6. How long we keep it

Your business profile (business name, phone, service area, trade, services and writing preferences) is saved to your verified All on Show account so it follows you between devices. Production records are encrypted in Upstash account storage. You can edit or remove the saved business profile in Profile. It is kept until you remove it or request account deletion. Logos, photos and generated drafts remain device-only.

Your preferred sharing apps are saved separately to your account, so the list is available on your next post and other devices. You can change or remove the choices in Profile → Sharing apps. This stores platform names only, not social-network passwords, access tokens or social account login connections. Opening a sharing app does not confirm publication. The list is kept until you replace it, clear it or request account deletion.

Account and billing records for as long as you use the service and as long as the law needs for tax and disputes. Stuff only on your phone or computer stays until you clear it (see Cookies & local storage) or wipe site data in the browser.

Monthly AI image counters expire seven days after the month ends. They contain a hashed account identifier and reservation counts, without copies of your images or prompts.

7. Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, and you can object to some processing. You can complain to the ICO at ico.org.uk. On this device you can wipe local All on Show data anytime under Profile → Security & data.

8. Children

All on Show is for adults running a trade or business, not for children.

9. Contact

Privacy requests: support@allonshow.com.