Privacy Notice

• Account data — name, email address and login credentials (managed by our authentication provider).
• Content you submit — workflow descriptions, interview answers, saved reports, projects and notes.
• Support messages — anything you send us through the contact page or by email.
• Usage and technical data — pages viewed, feature usage, device and browser information, IP address and error logs.
• Subscription data — plan, status and renewal dates. Card details are never seen or stored by us; they are handled by Paddle.

• Creating and managing your account and workspace — performance of our contract.
• Generating your diagnostic reports and recommendations — performance of our contract.
• Managing subscriptions and entitlements — performance of our contract.
• Security, abuse and fraud prevention — our legitimate interests.
• Improving the product and fixing faults — our legitimate interests.
• Responding to support requests — our legitimate interests.
• Marketing emails, where sent — your consent, withdrawable at any time.
• Meeting accounting and legal obligations — legal obligation.

• Service providers / subprocessors — hosting, database and authentication infrastructure, error monitoring, and the AI processing used to generate report content.
• Paddle, our Merchant of Record, for the sale of subscriptions, payments, subscription management, tax compliance and invoicing.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We keep account data and reports for as long as your account is active. You can delete your reports at any time from Settings, and ask us to delete your account. After closure we delete or anonymise personal data within a reasonable period, except where we must keep records (for example transaction records for tax purposes).

Depending on where you live, you may have the right to access, correct, erase, restrict or object to processing of your personal data, to receive it in a portable format, and to withdraw consent. UK/EEA users may also complain to their supervisory authority. Contact us and we will respond within one month.

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, and restricted administrative access. No system is perfectly secure, but we work to protect your data and to notify you where required if something goes wrong.

We use essential cookies and local browser storage to keep you signed in and to save interview progress on your device. We do not use advertising cookies. Any analytics we use is limited to understanding aggregate product usage; you can clear or block cookies in your browser settings, though sign-in will stop working without essential cookies.

To exercise your rights or ask a privacy question, contact Lee Stephens through the contact page.