Legal
Privacy Notice
Last updated: 11 September 2026. This notice explains how Ekundayo Banjoko, trading as NOW-N (now-n.io), handles your personal data.
1. Who we are and our role
Ekundayo Banjoko, trading as NOW-N, is the data controller for the personal data described here. That means we decide why and how your data is processed. You can contact us about privacy through the contact page on this site.
For purchases, Stripe processes your payment and card data as our payment processor, and as an independent controller for fraud prevention and legal compliance. Its handling of that data is governed by Stripe’s own privacy policy.
2. What we collect, why, and on what legal basis
- Account data — name, email address, password credentials. Used to create and secure your account and provide the service. Legal basis: performance of our contract with you.
- Profile and content data — business details, audience, stories, notes, voice recordings and transcripts, generated ideas, scripts and captions. Used to deliver personalised output and save your work. Legal basis: performance of our contract with you.
- Support and enquiry data — messages you send us and the details in them. Used to answer you and keep a record. Legal basis: contract and our legitimate interest in running the business.
- Usage and device data — pages viewed, features used, AI usage counts, IP address, device and browser identifiers, and campaign/referral parameters. Used for security, abuse prevention, measuring marketing, and improving the product. Legal basis: legitimate interests (security, product improvement, measuring the effectiveness of our marketing), or consent where required for analytics or marketing cookies.
- Subscription status — plan, renewal date, payment state relayed to us by Stripe. Used to grant the right level of access and to keep accounting records. Legal basis: contract and legal obligation.
- Marketing preferences — used to send you product updates where you have asked for them. Legal basis: consent, which you can withdraw at any time.
Your content is processed by AI service providers to generate output for you. We do not use your personal stories to train third-party public models.
3. Who we share data with
- Service providers and subprocessors: hosting and database providers, AI model providers, email delivery and analytics tools — all bound to process data only on our instructions.
- Stripe, our payment processor, for card payments, subscription management, invoicing and tax calculation.
- Professional advisers such as accountants and lawyers, where needed.
- Authorities or regulators where we are legally required to disclose, or to protect our rights.
We do not sell your personal information.
4. International transfers
Some of our providers are located outside the UK and EEA, including in the United States. Where data is transferred, we rely on adequacy decisions or the UK/EU Standard Contractual Clauses together with appropriate additional safeguards.
5. How long we keep data
- Account, profile and content data: while your account is open, then up to 12 months after closure, after which it is deleted or anonymised.
- Support and enquiry messages: up to 24 months.
- Usage, security and abuse-prevention logs: up to 12 months.
- Billing and tax records: as long as required by law, typically 6–7 years.
You can ask us to delete your data sooner; we will do so unless we must keep it for a legal reason.
6. Your rights
Depending on where you live, you have the right to access your data, correct it, have it erased, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Contact us through the contact page and we will respond within one month. If you are in the UK or EEA and are unhappy with our response, you can complain to your data protection supervisory authority (in the UK, the Information Commissioner’s Office).
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, encryption at rest with our hosting provider, row-level access controls so members can only reach their own records, restricted administrative access, and regular review of our providers. No system is completely secure, but we take these obligations seriously and will notify you and the relevant authority of a qualifying breach.
8. Cookies
We use essential cookies and similar storage to keep you signed in, secure the service and remember your session — these are required for the site to work. We also use limited analytics and marketing measurement to understand how people find and use NOW-N. You can manage or clear cookies in your browser settings at any time; blocking essential cookies will prevent sign-in from working.
9. Children
NOW-N is not intended for anyone under 18, and we do not knowingly collect data from children.
10. Changes
We may update this notice. Material changes will be highlighted on this page with a new “last updated” date.