Privacy Notice

Riess Enterprise, trading as The Attention Cartel, is the data controller for the personal data described here. We decide how and why your data is processed when you use our thumbnail and title workshop, and we are responsible for keeping it safe.

What we collect and why

• Account data — name, email address and login credentials (including Google sign-in identifiers). Used to create and secure your workspace. Legal basis: performance of our contract with you.
• Guest and questionnaire data — the guest name, email, guest type and the free-text answers submitted through your questionnaire link, plus the AI analysis, titles and run-sheets generated from them. Used to provide the Service. Legal basis: contract performance (for you) and legitimate interests in operating the tool you invited the guest to use.
• Support messages — the content of emails and requests you send us. Used to answer you. Legal basis: legitimate interests.
• Usage, device and log data — IP address, browser and device identifiers, pages viewed, timestamps and error logs. Used for security, abuse and fraud prevention, and to improve the product. Legal basis: legitimate interests and legal obligation.
• Marketing preferences — if you opt in, your email is used to send product updates. Legal basis: consent, withdrawable at any time.

We ask guests only for what is needed to develop the interview. Please do not submit sensitive personal data (health, political, religious or biometric information) through the questionnaire.

Who we share data with

• Service providers and subprocessors — hosting and database providers, the AI model provider that generates the analysis and titles, email delivery and analytics tooling. They act on our instructions under contract.
• Paddle.com, our Merchant of Record, for sale of the membership, subscription management, payments, tax compliance and invoicing. Paddle handles your payment details directly; we never see full card data.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to disclose by law.

We do not sell personal data.

International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA we rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.

Retention

Account and workspace data is kept while your account is active and for up to 12 months after cancellation, so you can return or export your material. Guest responses and generated run-sheets are deleted on request or when the workspace is deleted. Billing records are kept as long as tax law requires. Logs are kept for up to 12 months. When data is no longer needed we delete or anonymise it.

Your rights

Depending on where you live, you can request access to your data, correction of inaccuracies, erasure, restriction of processing, portability, and object to processing based on legitimate interests. You can withdraw consent to marketing at any time. Email privacy@theattentioncartel.com and we will respond within one month. UK and EEA users may also complain to their local supervisory authority. Guests who submitted a questionnaire can contact us directly to have their response removed.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted data at rest, row-level access controls, scoped questionnaire links and least-privilege access for administrators.

Cookies

We use essential cookies and local storage to keep you signed in and to secure the checkout. We may use limited analytics cookies to understand which pages are used; these are not used for advertising. You can clear or block cookies in your browser settings, though signing in will not work without the essential ones.

Contact

Riess Enterprise — privacy@theattentioncartel.com