Privacy Policy

The Cultural Power Index ("the Service") is operated by Unsigned Group Ltd("we", "us", "our"), a company registered in England and Wales. We are the data controller responsible for your personal data. If you have any questions about this policy, contact us at arran@unsignedgrp.com.

We collect the following categories of personal data:

• Account information. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.
• Access and role data. The access level (e.g. visitor, subscriber, manager) assigned to your account, and any subscription status.
• Usage data. Basic technical information such as your IP address, browser type, and pages viewed, collected to operate and secure the Service.

We use your personal data to:

• authenticate you and maintain your signed-in session;
• determine your access level and provide the features available to you;
• manage any subscription you take out;
• operate, secure, maintain, and improve the Service; and
• comply with our legal obligations.

Under UK data protection law we rely on the following legal bases: performance of a contract (to provide the Service you request), legitimate interests (to secure and improve the Service), and consent where required (which you may withdraw at any time).

We use strictly necessary cookies to keep you signed in and to secure the Service. These are essential to the Service's functionality; without them, sign-in will not work. We do not use advertising cookies.

We share personal data with trusted providers who process it on our behalf, only as needed to run the Service:

• Google — authentication (Sign in with Google).
• Supabase — database and authentication infrastructure.
• Vercel — application hosting.

Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses.

We retain your account data for as long as your account is active. If you close your account or ask us to delete your data, we will delete or anonymise it unless we are required to keep it to meet a legal obligation.

Under UK data protection law you have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these rights, email us at arran@unsignedgrp.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified to you.

Questions or requests regarding this policy or your data can be sent to arran@unsignedgrp.com.