Privacy Policy

What we store

• Account details: name and email. There is no password to store — sign-in is a one-time code sent to your email each time, plus an authenticator-app code for administrators.
• Everything you enter into a project (experience, preferences, assets) and what is generated from it, so your work carries forward and its history is kept as you edit it.
• Security and usage records: sign-in events, device and session information, and generation usage, used to protect accounts and enforce licence limits. IP addresses are stored only as keyed hashes, never in the clear.
• Optional feedback and results you choose to report.

How AI is used

Your project text is sent to an AI provider (OpenAI) to generate recommendations. It is sent without your name or email. Your ChatGPT account is not involved.

Administrator access

A small number of named administrators can view a customer's project content, in a read-only screen, to provide support and to improve the product. Every such view is individually logged, including which administrator viewed which project and when.

Administrators cannot edit or generate content inside your project, and cannot see your entitlement, session or purchase details of another administrator's own account.

Your controls and how deletion works

• Edit your profile, archive or delete an individual project, and request deletion of your entire account from the Account page.
• Deleting a single project hides it from you immediately; the underlying records are retained for a limited period, as described below, in case you need it restored, before permanent removal.
• Requesting account deletion asks a human administrator to review and action it — it is not instant. Once approved, we permanently erase your projects and everything generated from them (capabilities, opportunities, versions, offers, feedback), your sign-in sessions and devices. This step cannot be undone.
• We keep a minimal record even after account deletion: that a purchase and entitlement existed (for financial, tax and fraud-prevention accounting), and a security audit trail of account and administrator actions. These do not include your project content once it has been erased.

To be completed by counsel

Legal bases, exact retention periods, processors and sub-processors, international transfers, regional rights (GDPR/CCPA), contact details.