Legal

Privacy notice

Last updated 7 September 2026. Company evidence is private unless you explicitly disclose it.

What we collect

Account details you give us (email address, display name, and the profile text a proposer chooses to publish); the company data you record in the product (observations, evidence, goals, decisions, disclosures, proposals and outcomes); and technical records needed to run the service, such as sign-in events and access logs.

Why we hold it

To provide the product: to keep your company state, to enforce who may see what, to show a business who requested access to its evidence, and to keep an auditable history of changes. We do not sell personal data and we do not use your company data to advertise to you.

Who can see company data

By default, only members of your company. Evidence becomes visible outside your company only through a disclosure you approve: a public package is visible to anyone, and a restricted package only to a person you grant access to. A proposer's display name, headline and biography are public while their profile is active.

Access logging

Views and downloads of a disclosure package are recorded so a business can see who looked at its evidence and when. Those records are visible to the disclosing business.

Processors

We use infrastructure providers to host the database, run the application and deliver email. They process data on our instructions only.

Retention

Company records are kept while the company workspace exists. Audit records are retained for the integrity of the history. When an account is deleted, personal profile data is removed; records that another party relies on, such as a granted disclosure or a published result, remain with the identifying details removed where possible.

Your rights

You can access, correct or export your personal data, ask us to delete it, or object to a particular use. Write to us through the contact page and we will respond.

Cookies

We set only what is needed to keep you signed in and to keep the product secure. We do not run third-party advertising trackers.