Privacy Policy

• Account data — your name and email address, provided by our authentication provider (Clerk) when you sign up or sign in.
• Workspace content — everything you enter into the product: products and their stages, playbook answers, opportunity scores, experiments, risks, decisions, build-workspace notes, and connection records. Connection records are references to external services (with documentation links) — we never ask for and never store API keys or passwords there.
• Feed data — metrics your products push to Live Data Feeds (for example daily MRR or visitor counts), authenticated by a per-product secret.
• Usage analytics — anonymized product events (page views, feature usage) via PostHog, used to understand what is and isn't working.
• Error diagnostics — client error reports (stack traces) via PostHog when something breaks.
• AI assistant inputs — questions you ask the assistant, sent to our model provider to generate an answer. Answers are built only from evidence already in your workspace.
• Billing status — plan and subscription state via Clerk Billing. Payments are processed by Stripe; we never see or store card details.
• Email — transactional email (welcome, review and gate reminders, feed-failure alerts) sent through Resend.

• Operate the service: compute scores, gates, reports, and recommendations from your inputs.
• Deliver notifications you have configured (review reminders, gate availability, feed failures).
• Maintain security: detect abuse, debug failures, enforce workspace tenancy.
• Improve the product, in aggregate — never by publishing or selling your data.

• Sell, rent, or trade your data.
• Use your workspace content to market to anyone else, or to train AI models.
• Read your portfolio for fun — content is scoped to your workspace's members, and access by the operator is limited to support you request.

We rely on a small set of processors to run the service: Clerk (authentication, account management, billing), Neon (managed Postgres database), Vercel (hosting), PostHog (product analytics and error reports), Resend (transactional email), Stripe (payments), and a large language model provider (AI assistant). Each processes data only to deliver its function.

Everything you enter belongs to you. You can export your workspace to JSON at any time from Settings, and remove the bundled demo product whenever you like. Deleting a product removes it and its data from your workspace.

Your data is retained while your account is active. You can delete individual products yourself; to delete your account and workspace entirely, use your account management page (under the avatar menu) or contact us, and we will remove the workspace and its contents.

Data travels over TLS and is stored in a managed Postgres database. Every query is scoped to your workspace, feed ingestion requires a per-product signature, and obvious secrets pasted into text fields are flagged by the app and should be removed. No system is perfectly secure, so we keep the amount of sensitive data we hold to the minimum the product needs — which, by design, is close to none.

We set cookies required for sign-in and session security, a theme preference, and analytics cookies via PostHog. No advertising cookies, ever.

If this policy changes materially, we will notify you in the app or by email before the change takes effect.