1. Data We Collect
Account Information
When you register for the Service, we collect:
- Email address (required)
- Name (optional, or provided via Google OAuth)
- Profile picture (if provided via Google OAuth)
- Password hash (for email/password accounts; we never store plaintext passwords)
Module Inputs and Outputs
As you use the Service, we store:
- Your responses to module questions and form inputs
- AI-generated outputs created from your inputs
- Documents, strategies, and plans generated within the platform
- Backlog items, action plans, and progress tracking data
Usage Data
We automatically collect:
- IP address (for security and abuse prevention)
- Pages visited and features used within the platform
- Session duration and interaction patterns
- Browser type and device information
- AI token usage for rate limiting and billing
2. How We Use Your Data
- Service delivery: To provide and operate the platform features you use
- AI processing: Your inputs are sent to Anthropic's Claude API to generate outputs.
Anthropic processes this data under their data processing terms and does not use it for model training.
- Account management: To manage your subscription, authenticate you, and communicate
about your account
- Security: To detect and prevent fraud, abuse, and unauthorised access
- Improvement: To understand usage patterns and improve the Service (using aggregated,
anonymised data only)
3. Third-Party Processors
We share your data with the following third-party processors as necessary to provide the Service:
- Anthropic (Claude API): Processes your text inputs to generate AI outputs.
Data is processed in accordance with Anthropic's commercial terms and is not used for model training.
- Google OAuth: If you sign in with Google, authentication data is exchanged with Google
in accordance with Google's privacy policy.
- hCaptcha: Used on registration and login forms to prevent automated abuse.
hCaptcha processes minimal data as described in their privacy policy.
We do not sell your data to third parties. We do not share your data with advertisers.
4. Data Retention
- Active accounts: Your data is retained for as long as your account is active.
- Deleted accounts: Upon account deletion, your data is removed within 30 days.
Backup copies may persist for up to 90 days before being permanently purged.
- Inactive accounts: Accounts inactive for more than 12 months may be flagged for
deletion with 30 days prior notice.
- Legal obligations: We may retain certain data longer if required by law
(for example, billing records for tax compliance).
5. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Export: Download your data in a portable format through the platform's export feature (SEC-004).
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your account and associated data.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Objection: Object to processing of your data for specific purposes.
- Portability: Request transfer of your data to another service provider.
To exercise any of these rights, contact us at
[email protected]. We will respond within 30 days.
6. Cookies and Tracking
The Service uses minimal cookies necessary for operation:
- Session cookie: To maintain your authenticated session. Essential for the Service to function.
- Theme preference: To remember your light/dark mode choice.
We do not use advertising cookies, tracking pixels, or third-party analytics services that profile
individual users. We do not participate in cross-site tracking.
7. International Transfers
Your data may be processed in locations outside your country of residence, including:
- The United Kingdom (where our servers are based)
- The United States (where Anthropic processes AI requests)
Where data is transferred internationally, we ensure appropriate safeguards are in place,
including standard contractual clauses where required by applicable data protection law.
8. Children's Privacy
The Service is not intended for use by individuals under 18 years of age. We do not knowingly
collect personal data from children. If we become aware that a child has provided us with personal data,
we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material
changes via email or in-app notification at least 14 days before they take effect.
For privacy-related enquiries or to exercise your data rights:
- Email: [email protected]
- Data Protection Officer: [email protected]
- Company: DEFINEXTEND LTD, trading as High-Velocity X
- Registered in England and Wales
- ICO Registration: DEFINEXTEND LTD is registered with the Information Commissioner's Office (ICO)
If you are not satisfied with our response, you have the right to lodge a complaint with the
Information Commissioner's Office (ICO) at ico.org.uk.