Last updated: March 2026
Statementory ('we', 'us', 'our') is the data controller for the personal data you provide when using this service. For any privacy-related enquiries, contact us via the contact page at statementory.com/contact or by email at support@statementory.com.
Single reviews: your email address and personal statement (processed and deleted immediately after the review is generated). Free previews: your email address and personal statement (processed and deleted immediately after the preview is generated). Pro subscribers: your email address, name (if provided via Google login), subscription status, review history, and session data. All users: cookies necessary for the service to function, and — where you have given consent — analytics cookies (see section 8).
We process your data on the following bases: (a) Contract — to deliver the review or preview you paid for or requested; (b) Legitimate interests — to manage Pro subscriber accounts and prevent fraud; (c) Consent — for analytics cookies and any optional marketing communications, which you can withdraw at any time.
Your email is used to deliver your review and, for Pro users, to manage your account. We do not sell your personal data. We do not share your data with third parties for their own marketing purposes. We may send follow-up emails to single-review customers where you have consented, and you can unsubscribe at any time via the link in any such email.
We share data with the following processors, each operating under their own privacy policy: Anthropic (Claude AI — processes your personal statement to generate the review; data is not used to train Anthropic's models under our API agreement); Stripe (payment processing); Resend (transactional email delivery); Google (OAuth authentication, where you choose to sign in with Google); Google Analytics (website analytics — only activated with your consent; collects anonymised usage data); Vercel Analytics (anonymised page-view data, no cookies); Neon (PostgreSQL database hosting); Inngest (background job processing). All processors are contractually bound to process data only on our instructions.
Some of our third-party processors (including Anthropic, Stripe, Resend, Neon, and Google) are based in the United States. Where data is transferred outside the UK or European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant supervisory authority. You can obtain more information about these safeguards by contacting us.
Personal statements submitted for single reviews or free previews are processed by our AI model and deleted immediately after the review or preview is generated — they are never stored beyond that point. Pro subscribers' statements are retained to power the review history and version comparison features in your dashboard, and can be deleted upon request or by using the 'Clear saved data' option in your account settings.
We use the following cookies: 'pro_session' (keeps Pro subscribers logged in for up to 30 days — strictly necessary for the service to function); 'google_oauth_state' and 'google_oauth_intent' (temporary, used only during Google sign-in, deleted after authentication completes — strictly necessary). With your consent only, we also use Google Analytics cookies (_ga, _gid) to understand how visitors use Statementory and to improve the service. Analytics cookies are only set after you click 'Accept' in the cookie banner. You can decline analytics at any time by clicking 'Decline' in the banner. Previously stored consent can be reset by clearing your browser's local storage.
Statementory is designed for UCAS applicants, who are typically aged 17–18. We do not knowingly collect personal data from children under 13. If you are between 13 and 15 years old, you must have the permission of a parent or guardian to use this service and submit personal data. If you are a parent or guardian and believe your child under 13 has provided us with personal data without your consent, please contact us at support@statementory.com and we will delete it promptly. We do not use personal data collected from young people for advertising purposes.
Pro account data is retained for as long as your account is active or until you request deletion. Single-review and free-preview personal statements are deleted immediately after processing. Email addresses collected for single reviews are retained in our email provider's logs for up to 30 days. If you delete your account, all associated data is permanently deleted within 30 days.
Under UK GDPR and applicable data protection law, you have the right to: access the personal data we hold about you; correct inaccurate data; erase your data (right to be forgotten) — Pro subscribers can delete their account and all associated data from the account settings page; restrict how we process your data; receive your data in a portable format; object to processing based on legitimate interests; withdraw consent at any time where processing is consent-based (including analytics cookies); and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your rights have been infringed. To exercise any of these rights, contact us via the contact page.
We may update this policy from time to time. We will notify Pro subscribers of significant changes by email. Continued use of the service after changes are posted constitutes acceptance of the updated policy.
For any privacy-related questions or requests, contact us via statementory.com/contact or email support@statementory.com. We aim to respond within 5 business days.