Privacy Policy

Last updated: 24 July 2026

Mainchester is a trading name of Web Print & Signs Limited (company no. 16585795, registered office: 20 Burnley Road, Nelson, Lancashire, BB9 5HS, United Kingdom), the data controller for personal data processed through mainchester.com, app.mainchester.com and our Telegram bots (the "Service"). Contact: hello@mainchester.com.

1. What we collect

• Account data — business name, your name, email address, website, chosen plan.
• Telegram data — your Telegram user ID and the messages (text, voice notes, photos, links) you send our bots, so we can act on them.
• Connected-account data — OAuth access tokens for the social accounts you connect (Facebook, Instagram, X, LinkedIn, Google Business), plus content, comments and engagement metrics from those accounts, used solely to operate the Service.
• Usage & billing data — posts published, plan usage, and (when payments launch) billing status. Card details are handled by our payment processor and never touch our servers.
• Website data — if you enter your email on our site it is stored as an enquiry/lead. Our marketing pages set no advertising cookies.

2. Why we process it (lawful bases)

• To provide the Service (contract): creating and publishing your posts, monitoring comments, sending reports.
• AI processing (contract): your requests and brand information are sent to AI providers to draft content, images, replies and transcribe voice notes.
• Service messages (contract/legitimate interest): onboarding, trial and account notifications via Telegram or email.
• Improvement & security (legitimate interest): logs, monitoring and backups to keep the Service reliable and secure.

3. Who we share data with (processors)

Provider	Purpose
Telegram	Messaging interface for the Service
Google (Gemini, USA)	AI processing: drafting post content and suggested comment replies, image generation, voice transcription
Meta, X, LinkedIn, Google	Publishing to and reading engagement from your connected accounts, via their official APIs
Hostinger	Server hosting (EU/UK region infrastructure)
DreamHost	Domain/DNS and email forwarding
Stripe (when payments launch)	Subscription payments

We do not sell personal data. Some providers process data outside the UK/EEA under appropriate safeguards (e.g. standard contractual clauses).

4. Retention

• Account and content data: kept while your account is active, deleted or anonymised within 90 days of account closure.
• Social access tokens: deleted when you disconnect an account or close your account.
• Backups: rotate automatically within 7 days on-server.
• Leads/enquiries: kept up to 24 months, or deleted on request.

5. Your rights

Under UK GDPR you can request access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict certain processing, and withdraw consent where processing relies on it. Email hello@mainchester.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

6. Security

Data is held on access-controlled servers with TLS encryption in transit, restricted credentials, automated monitoring and daily backups. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

7. Platform data (Meta, LinkedIn, X, Google)

Data received from social platform APIs is used only to provide the Service to the account owner who connected it, is never sold or used for advertising, and is deleted when the connection is removed. You may revoke our access at any time from the platform's own security settings, or by emailing us. To request deletion of data obtained via a platform integration, contact hello@mainchester.com.

8. Changes

We'll post any changes here and update the date above; material changes will be notified through the Service.

← Back to mainchester.com