Who controls your data
Bantered is a trading name of Digitopia Design Ltd. Digitopia Design Ltd is the data controller for the information you give us.
- Registered in
- England & Wales, company number 12037302
- Registered office
- 124 City Road, London, EC1V 2NX
- Contact
- hello@banteredhq.com
What we collect
The answers you type into the questionnaire. These are the heart of it: names, relationships, stories, jokes, and whatever you put in the open 'anything else' box at the end.
Your email address, so we can send your order confirmation and so support can find you if you lose access.
Payment information from Stripe - the country and postcode on your card's billing address, and the amount. We never see or store your card number.
Your IP address and browser user-agent at the moment you consent to something, because a consent record that cannot be tied to a moment is not much of a record.
Your IP address when you ask for a free opener, when your browser reports an error to us, or when you join the waitlist. We keep it for 24 hours and then delete it, and it is there to stop one person running up our costs by asking for hundreds of openers.
The speeches we generate for you, and any edits you make to them.
If you join the father of the bride waitlist, your email address - and nothing else. We keep it until you unsubscribe, or until we have sent the one email the list exists for and you have not asked for anything more.
Why we are allowed to use it
To write your speech and give you access to it, we rely on our contract with you. Without your answers there is no product.
To keep records of what we sold, to whom, and what they agreed to, we rely on our legal obligations - tax law requires us to keep sales records, and consumer law requires us to be able to show what you consented to.
To keep a copy of what we generated, and to hold information about people mentioned in speeches, we rely on our legitimate interests. That is explained below, because it is the part that deserves explaining.
If you join the father of the bride waitlist, we rely on your consent, which you give by sending us your address on that form. You can withdraw it at any time with the unsubscribe link in the email, or by emailing us, and withdrawing does not affect anything we did before you did.
People mentioned in your speech
A best man's speech is about other people. When you tell us about the groom, his family, his exes or the stag do, you are giving us personal information about people who have never used this site and have not agreed to anything.
We take that seriously rather than pretending it is your problem. We use that information only to write the speech you asked for. We do not build profiles, we do not use it to target advertising, and we do not sell it - to anyone, ever.
Data protection law says we should normally tell people when we hold information about them. We do not do that here, and we want to be straight about why: we have no way to contact them. You give us a first name and a story, not an email address. Tracking down the groom to send him a privacy notice would mean identifying and contacting someone who has told us nothing about himself - which would be a far greater intrusion than the speech itself, and would also spoil the surprise you paid for. The law allows this where the effort would be disproportionate, and we have written down that assessment.
If you are someone who has been mentioned in a speech and you are not happy about it, email hello@banteredhq.com. You have rights here and we will honour them.
One thing worth saying plainly to the person buying: you are responsible for what you tell us. Our filters block a lot, but they are not a substitute for judgement about what belongs in a speech given in front of someone's family.
How long we keep it
Your questionnaire answers are deleted 90 days after you finish your build. That is the same period as your access, so when your access ends, the answers go.
The speeches we generated are kept for 13 months, which is longer, and we would rather explain that than bury it. If someone ever claims that something we wrote about them was untrue or damaging, the only way we can respond fairly - to them or to you - is to still have a copy of what we actually produced. Legal claims of that kind can be brought for about a year. During that period the speeches are held in restricted storage, not in the running application, and are not used for anything else.
If a complaint is made about a particular speech, we suspend deletion of that build's records until it is resolved. Deleting evidence because a timer expired would not help anyone.
Order records, payment records and consent records are kept for at least 6 years from the end of the accounting period they fall in. We do not choose that: HMRC sets minimum retention for sales and VAT records, and a consent record you cannot produce later is not evidence of anything. We do not delete them automatically when that period ends either - removing them is a decision a person makes, not a timer. These contain no speech content: an amount, a date, a country and postcode, and what you ticked.
If you arrived from an advert, we record which one - the campaign tag and the click identifier your search engine adds to the link. We keep it with your build and delete it with your answers, after 90 days. It tells us which adverts are worth paying for. It is not stored on your device, we do not use it to build a profile of you, and we do not share it with anyone.
When we delete that, we first add it to a monthly total per advert: how many people started a speech, how many bought, and how much they spent. Those totals are counts and nothing else. They carry no click identifier, no order number and nothing that points back to you or your build, so they are kept beyond the 90 days.
We also keep a small set of measurements about each speech we generate - how long it was, how it was structured, how many attempts it took, and which of your questions it drew on. These are numbers, not words: they contain no part of your speech and no part of your answers. We keep them after the speech itself is deleted, because they are how we tell whether the product is getting better. They stay attached to your order, so they are not anonymous - we can tell which ones are yours, and if you ask us to erase your data we erase these with it.
Our deletion schedule runs automatically, once a day. The current schedule is recorded in our systems as "retention_v2_2026_07_29" so we can always establish which rules a particular deletion happened under.
The AI, and training
Your speech is written by an AI model provided by Anthropic. Your answers are sent to them to produce it.
We do not use your answers or your speeches to train AI models, and Anthropic does not train its models on them either. Nothing you write here becomes part of a model that talks to somebody else.
We keep a log of when our own safety filters rejected a draft. That log records which rule fired, not what you wrote.
Anthropic keeps what we send them for a short time to run the service, and deletes it from their systems within 30 days. The one exception is material their automated safety systems flag as breaking their usage rules, which they can keep for up to two years. That is their process, not ours, and we cannot shorten it on request - but it is the only copy that exists outside our own database.
How it is protected
Your answers, the speeches we write from them, and the free opening line are encrypted before they are stored, using a key that is held outside the database. Someone who obtained a copy of the database would not be able to read them. The email address we contact you on and the payment record are not encrypted in this way, because the systems that send your email and keep the tax record need to read them.
All connections to the service are encrypted in transit, and the database itself is encrypted at rest by the company that hosts it.
Who else handles it
We use a small number of companies to run the service. Each of them only gets what they need to do their part:
Supabase stores the database, in Stockholm. Vercel runs the website. Cloudflare checks the “not a robot” box on the free opener. Stripe takes the payment. Resend sends your confirmation email. Anthropic provides the AI that writes the speech. Our analytics provider counts page views on the public pages. MailerLite holds the father of the bride waitlist and sends that one email.
Everything is stored in the UK or the EU, apart from two steps. Anthropic processes your answers in the United States: that transfer is covered by the standard contractual clauses approved for use under UK data protection law, which Anthropic publishes in full at anthropic.com/legal/data-processing-addendum. And when you pass the “not a robot” check on the free opener, Cloudflare sees your IP address on whichever of its servers is nearest you. Nothing you write about anyone else ever goes anywhere but the UK, the EU and that AI step.
We do not sell your data and we do not share it for advertising.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it while something is being sorted out, object to how we are using it, or ask for it in a portable format. Email hello@banteredhq.com and we will deal with it within a month.
Deleting your account erases the answers you gave us. Your generated speeches are not erased with them - they move into restricted storage for the rest of the 13 months, because if anyone ever claims a speech we wrote defamed them, that text is the evidence of what we actually produced. Nobody can read it through the site, including you.
It also does not remove the order and consent records, and we would rather tell you that now than have you discover it later. Those records stop being linked to your account, so they no longer identify you through it - but the payment record itself, including the billing postcode, the IP address, the payment reference and the email address you bought with, still exists. Tax law requires it. We will not describe that as erasure, because it is not.
Complaints
Email hello@banteredhq.com first - it is quicker and we would like the chance to put it right.
If you are not satisfied, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. Digitopia Design Ltd is registered with the ICO under reference ZC160761.
privacy_v1_15_2026_09_28