One-Shot

Privacy notice

Last updated 14 October 2026

One-Shot is operated by Jakes Creates Ltd, the controller of the personal information described here. Contact hello@one-shot.design with questions or requests about your information.

The waiting list and beta invitations

We collect your name, email address and role, plus your company or team if you provide it. We use these details to manage beta access and send a waiting-list confirmation or invitation. Joining does not create an account or subscribe you to marketing. Repeat submissions keep the original details and update the submission record.

If a member invites you, we receive your email address from them and use it to manage that invitation. We record invitation status and access decisions to operate the private beta and prevent misuse. You can ask us to remove waiting-list or invitation details by email.

Accounts and projects

Our authentication provider stores your email address and a protected form of your password. We store the projects, uploaded fonts and settings you create. Project owners can see collaborators’ email addresses; authorised members can access shared content. You can export your account data or delete your account in Account settings.

If you connect an AI assistant, we record the connection and its reads or proposals. The assistant’s provider receives the project information you authorise it to access. Connections are optional and can be revoked.

Feedback

Feedback includes your message, images you choose to attach, your account identity and the limited interface context shown in the form. We do not automatically capture screenshots, project names or design tokens. Feedback and attachments are private to you and the One-Shot team. Check images for information you do not want to share. We email you about feedback only if you select that option.

Why we use this information

We use account and project information to provide the service you request under our agreement with you. Our legitimate interests are managing beta access, improving One-Shot through feedback, and keeping the service secure. Optional feedback follow-up emails rely on your consent, which you can withdraw by contacting us. We do not sell personal information or use it for advertising.

Service providers and international processing

Vercel hosts the website and application. Supabase provides the database and authentication; our project database is in London. Resend delivers account and beta emails. Namecheap forwards messages sent to our contact address to the operator’s business inbox. Providers process information needed to deliver their services, including technical connection and security records.

Some provider processing takes place outside the UK, including in the United States. A London database does not mean all processing stays in the UK. Providers describe their transfer arrangements and contractual safeguards in their published Vercel, Supabase and Resend documentation. Contact us for information about the safeguards applicable to your data.

How long we keep information

  • Waiting-list details: up to 365 days after the latest submission, unless removed earlier.
  • Feedback and attached images: 180 days. Uploaded feedback images not submitted with a message are removed after 24 hours.
  • Invitation recipient details: anonymised 90 days after expiry once the invitation is no longer pending. Delivery records are normally removed after 30 days; beta access audit records after 365 days.
  • Account and project content: while your account remains open. Archiving a project does not erase it. Account deletion removes projects you own; releases you contributed to other people’s projects remain with author attribution removed. Names or other details you included in shared content are not automatically removed.

Scheduled cleanup removes expired records. Provider backups and operational logs may persist for their retention periods after removal from the live service. Resend retains email and delivery logs for 30 days under its standard plans. Contact correspondence is kept while needed to handle your request and related obligations.

Cookies and external fonts

We use essential cookies to keep you signed in and complete account verification or password reset. We do not use advertising or analytics cookies. Short-lived request counters help limit abuse.

The editor and style starter previews can load Google Fonts. Google receives your IP address when these fonts are requested. New website, dashboard and Android projects use a Google font by default. The public pages do not load third-party fonts.

Your choices and rights

You can ask to access, correct or erase your personal information, restrict its use, receive a portable copy, or object to processing based on legitimate interests. These rights depend on the circumstances. Withdrawing consent does not affect earlier processing. Providing waiting-list details is optional; an email address is required for access and account communications.

Contact hello@one-shot.design to exercise your rights. You can also complain to the UK Information Commissioner’s Office. We will update this notice when the way One-Shot handles information changes.