Privacy policy.
A plain-language statement of what we collect, why, and how long we keep it. The full entity details (legal entity name, registered address, jurisdiction of incorporation, governing law, and data controller) are placeholders the founder must fill in before live payments go on.
- Legal entity name: [PLACEHOLDER: legal entity name]
- Registered address: [PLACEHOLDER: registered address]
- Jurisdiction of incorporation: [PLACEHOLDER: jurisdiction of incorporation]
- Governing law: [PLACEHOLDER: governing law]
- Data controller: [PLACEHOLDER: data controller name]
- Privacy contact: [PLACEHOLDER: privacy contact email]
What we collect
When you submit an audit, we collect the four fields you entered (business name, category, city, email) and store them with the audit report. If you create an account later, we will store the minimum needed to identify you.
Why we collect it
We use the audit fields to query the AI engines on your behalf and to send the report. We use the email to deliver the report and (only with your explicit opt-in) to send a follow-up cadence that you can unsubscribe from in one click.
Retention
We keep your audit lead and report for the life of your account or until you ask us to delete them, whichever comes first. The audit-report data lives in a managed Postgres instance and is encrypted at rest.
Third parties we rely on
To produce the report we forward the three audit fields (business name, category, city) to two AI engines: Perplexity (model: sonar) and OpenAI (model: gpt-4o-mini-search-preview, with web search on). Those engines handle the data under their own published terms. We do not forward your email to either engine.
International transfers
The audit pipeline runs in the United States and the European Union. Your data may transit both jurisdictions. Perplexity and OpenAI process the forwarded fields under their standard US/EU data-handling posture.
Your rights
You can ask us to delete your lead and report at any time. You can ask for a copy of the data we hold on you. Until an account is wired in a follow-up scope, reply to the report email and a member of our team will process the request within seven days.
Contact
For any privacy request: [PLACEHOLDER: privacy contact email]. For the entity responsible for the data: [PLACEHOLDER: legal entity name].