Privacy Notice

This notice explains how Wren collects, uses and protects personal data. The data controller is Shonaike Finance Ltd, registered in England and Wales, company number 16406111, at 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

Our data protection contact is hello@planwithwren.com.

• Account information: your name and email address. Optionally a phone number, a company name, and for chartered professionals a professional body, membership number, grade and indemnity insurance details. Passwords are handled by our authentication provider and we never see or store them.
• What you look at: the addresses you search, the boundaries you draw, the sites you save and the notes you attach to them.
• Your case: what you tell us about your proposal, the files you upload, the documents we draft, correspondence with your council, and the approval you give before anything is filed.
• Payment metadata: transaction identifiers, the amount, and the last four digits of a card where one was saved. Full card details go to the payment provider and never reach our servers.
• Questions you ask the AI tools, and the answers, kept as an append-only record on your account that you can export at any time.
• Support communications: emails, contact form messages, and anything else you send us.
• Technical data: IP address, browser identification and the session cookie that keeps you signed in. Anonymous use of the free question allowance is counted against a one-way hash of your IP address and browser, which cannot be reversed to identify you.

Under UK GDPR Article 6 we rely on:

• Performing our contract with you, to deliver the service you asked for, including preparing and submitting your application.
• Legitimate interests, for service quality, security, fraud prevention and aggregate analytics. We weigh those against your privacy and only proceed where the impact on you is minimal.
• Consent, for anything optional. You can withdraw it at any time.
• Legal obligation, to keep financial records for the period HMRC requires and to comply with lawful requests.

When you use Ask Wren, or when a document is drafted for you, the relevant text is sent to Anthropic for inference under commercial terms that prohibit the use of your inputs or outputs to train their models. Anthropic retains inputs and outputs for a limited period for abuse monitoring and operational support, then deletes them in line with its published retention policy.

We do not put personally identifying details into prompts where the task does not need them. Where a value has to be correlated but does not have to be readable, it is stored as a salted hash rather than as the value itself.

Every AI interaction on your account is logged in a form you can export, and nothing in the product can edit that log after it is written. If you would rather not have anything processed by a third-party AI provider, do not use the AI tools; the map, the constraint data and the council library involve none of them.

Fuller detail about how the AI is used, what is checked and what is recorded is at our AI disclosure.

Each of these operates under a data processing agreement and is limited to processing your data on our instructions.

• Supabase, for the database, authentication and private file storage.
• Vercel, for application hosting.
• Anthropic, for AI inference.
• Voyage AI, for turning policy text into vectors so it can be searched by meaning.
• Stripe, for card payments and for paying chartered professionals.
• GoCardless, for bank transfers under Open Banking.
• Resend, for outbound email and for receiving council correspondence.
• Upstash, for rate limiting and short-lived caching.
• Sentry, for error reporting.
• Mapbox, Ordnance Survey, MapTiler and Google, for map tiles, addressing and street-level imagery.

The UK and the EU benefit from a mutual adequacy decision, so transfers between them are not restricted. Some processors are based in the United States. Those transfers take place under the International Data Transfer Agreement or under Standard Contractual Clauses approved by the Information Commissioner’s Office, with additional safeguards where they are needed.

• Account data: while your account is active.
• Case records, signed documents and signature records: retained after closure, because they are the evidence a chartered professional signed a specific document on a specific day and they may be needed for professional indemnity purposes years later.
• Financial records, including invoices and receipts: six years, as HMRC requires.
• Server logs: ninety days, for security and diagnostics.
• Saved sites, appraisals, alerts, map annotations and imported layers: while your account is active, and erased when you delete it.

You can request deletion from your settings. There is a twenty-four hour window in which you can cancel it, after which an automated process runs, and it runs whether or not anybody at Wren is watching.

Deletion is not the same as destroying every row, and it would be dishonest to describe it that way. Everything held only because you were a user is erased: saved sites, appraisals, alerts and notifications, shared links, AI sessions, API keys, credits, referrals and your uploaded files.

Records we are required to retain are kept and re-anchored to an anonymised stub that cannot be traced back to you: signed planning documents, signature records, and financial records HMRC requires for six years.

Your sign-in identity is then either deleted outright, or, where a statutory record is anchored to it and cannot lawfully be destroyed, scrubbed of your email, phone and metadata and permanently disabled. Which of the two happened is recorded, and we tell you by email before your address is removed, because that is the last moment we can.

Under UK GDPR you can ask for:

• Access to the personal data we hold about you.
• Correction of anything inaccurate or incomplete.
• Erasure, where the legal basis for holding it no longer applies.
• Restriction of processing, in certain circumstances.
• Portability of the data you gave us.
• Objection to processing based on legitimate interests.
• Withdrawal of any consent you gave.

Email hello@planwithwren.com. We respond within one month, and may ask you to verify your identity first. Your AI usage log and your credit history can be exported yourself, from your settings, without asking anybody.

We use a session cookie to keep you signed in, a short-lived cookie during password recovery and sign-in, and a referral cookie lasting thirty days if you arrived through a referral link.

There are no third-party tracking cookies, no advertising cookies and no marketing pixels. We do not build behavioural profiles. That is also why there is no cookie banner: there is nothing here to consent to beyond what is strictly necessary to run the service.

Every table in our database enforces row-level access rules, so an account can only read its own data. Files are held in private storage and served through short-lived signed links rather than public addresses. Two-factor authentication is available on every account and you can see and revoke your own active sessions.

We do not log personal data. Where something must be correlated without being readable, it is stored as a salted hash.

If you think we have mishandled your personal data, please tell us first at hello@planwithwren.com. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, and you do not have to come to us first.

We may update this notice. Material changes are communicated by email at least thirty days before they take effect, and the date at the top of this page tells you when the current version came into force.