Legal
Privacy Policy
Effective: 10 March 2026 · UK GDPR
Short version: We collect only what we need to run the service. We don't sell your data. Your naming briefs are treated as commercially sensitive. You can request deletion at any time.
1. Overview
NameWonders is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our platform and API.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Data controller: NameWonders · hello@namewonders.com
2. What We Collect
Account data: Name, email address, password (hashed), account creation date.
Usage data: API requests (endpoint, timestamp, credit consumption), naming briefs, generated outputs. Naming brief content is held for 90 days then anonymised.
Payment data: Razorpay processes all payments. We receive only transaction confirmation and credit pack purchased — no card numbers stored by us.
Technical data: IP address (rate limiting and fraud prevention), browser type, device type. Retained for 12 months.
3. How We Use Your Data
We use your data to:
(a) Provide and improve the Service — processing naming requests, applying credits, returning results;
(b) Improve the methodology library — using anonymised, aggregated patterns of method selection and scoring results. No personally identifiable data is included;
(c) Communicate with you — service updates, credit balance alerts, responses to enquiries;
(d) Prevent fraud and abuse — detecting unusual API usage patterns, enforcing rate limits.
We do not use your data for advertising or sale to third parties.
4. Naming Brief Privacy
Your naming briefs contain commercially sensitive information. We treat this data with heightened protection:
— Brief content is not shared with any third party — Brief content is used only to process your request — Brief content is anonymised after 90 days — Generated outputs (names, scores, rationale) are stored in your account and not shared
5. Third Parties & Sub-Processors
Google Cloud (Firebase, Cloud Run, Firestore) — infrastructure, hosted in EU (europe-west2).
Anthropic (Claude) and Google (Gemini) — scoring, rationale generation, and name candidate generation. Naming brief content is transmitted to these services solely for processing your request and is subject to their respective data processing agreements.
Razorpay — payment processing. Payments from Indian users are processed by Razorpay Software Private Limited, India.
Resend — transactional email delivery.
7. Data Retention
Account data: Lifetime of account plus 12 months after deletion. Naming brief content: 90 days, then anonymised. Anonymised session data: Retained indefinitely. Payment records: 7 years (financial regulation). Server logs: 12 months.
8. Your Rights (UK GDPR)
You have the right to: access your data, request rectification, request erasure, restrict processing, data portability, and object to processing.
To exercise any right, email hello@namewonders.com with subject "GDPR Request". We will respond within 30 days.
You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Contact & Updates
Privacy enquiries: hello@namewonders.com
Last updated: 10 March 2026. We will notify registered users by email of material changes before they take effect.