Privacy
Policy

1. Data Controller

The Playbook Society, responsible for the TPShip platform (ship.theplaybooksociety.com), is the data controller for personal data collected through the use of the service.

To exercise your rights or for any privacy-related enquiries, please contact us at the email address available on the platform.

2. Data We Collect

TPShip collects the following personal data:

Account data: email address and authentication credentials, managed by Clerk (clerk.com). TPShip does not store passwords.

Payment data: payment information processed exclusively by Stripe (stripe.com). TPShip does not store credit or debit card details.

Usage data: content entered by the user on the platform for content generation (property descriptions, photographs). This data is transmitted to the Anthropic API for processing and is not permanently stored by TPShip.

Technical data: IP address, browser type, and session data, for security and service operation purposes.

3. Purpose and Legal Basis

Personal data is processed for the following purposes:

Contract performance: account management, payment processing, and delivery of the contracted service (Art. 6(1)(b) GDPR).

Legal obligations: issuance of fiscal documentation and compliance with regulatory requirements (Art. 6(1)(c) GDPR).

Legitimate interests: platform security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).

Your email address may be used for service-related communications (updates, renewal notices). You may opt out of marketing communications at any time.

4. Sub-processors and Transfers

TPShip relies on the following sub-processors to deliver the service:

Clerk (clerk.com) — authentication and account management. Privacy policy: clerk.com/legal/privacy.

Stripe (stripe.com) — payment processing. Privacy policy: stripe.com/privacy.

Anthropic (anthropic.com) — AI processing. Content entered by the user (descriptions, images) is transmitted to the Anthropic API for content generation. Privacy policy: anthropic.com/privacy.

Vercel (vercel.com) — platform hosting. Privacy policy: vercel.com/legal/privacy-policy.

Some sub-processors may process data outside the European Economic Area. In such cases, transfers are carried out under appropriate safeguards (Standard Contractual Clauses or European Commission adequacy decisions).

5. Data Retention

Account data is retained for the duration of the active subscription and for 5 (five) years after closure, to comply with legal and fiscal obligations.

Content entered for material generation is not permanently stored by TPShip after processing by the Anthropic API.

Payment data is retained by Stripe in accordance with its own privacy policy and applicable legal requirements.

6. Your Rights

Under the GDPR, you have the following rights:

Access: obtain confirmation of the data being processed and a copy thereof. Rectification: correct inaccurate or incomplete data. Erasure: request deletion of your data, in cases provided for by law. Restriction: limit processing under certain circumstances. Portability: receive your data in a structured, machine-readable format. Objection: object to processing based on legitimate interests or for direct marketing purposes.

To exercise these rights, please contact us through the contact details available on the platform. Requests will be responded to within 30 days.

You also have the right to lodge a complaint with your local data protection authority. If you are based in Portugal, the supervisory authority is the CNPD (cnpd.pt).

7. Cookies and Similar Technologies

The platform uses strictly necessary cookies for service operation (authentication and session management). No third-party tracking or advertising cookies are used.

Session cookies are deleted when you close your browser. Authentication cookies persist for the period necessary to keep your session active.

8. Security

TPShip adopts appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. All communications between the user and the platform are encrypted via HTTPS.

In the event of a data breach that may affect users' rights, TPShip will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

9. Changes to This Policy

This Privacy Policy may be updated periodically. Material changes will be communicated by email with at least 30 days' notice. The current version will always be available at ship.theplaybooksociety.com/privacy.