Privacy Notice

Founder Closed Alpha — last updated 2026-08-15

1. What we collect

Account information you provide (name, email, organization), authentication data, and the content you create while using the platform (tasks, briefings, roles, and related workforce data), plus operational logs (audit trail, error logs) needed to run and secure the service.

2. AI processing

When an AI-provider-backed feature is enabled for your organization, the specific content you submit to that feature is sent to the configured AI provider (OpenAI or Anthropic) to generate a response. During the Closed Alpha, the default configuration uses a local simulated responder that sends nothing to any external AI provider unless your organization's administrator has explicitly configured a real provider. Every such call is recorded in an audit log.

3. Subprocessors

Infrastructure hosting, and — once configured — transactional email delivery and AI provider services, as selected by the operator of this Alpha. A current list of active subprocessors for this deployment can be requested via the contact address in your invitation.

4. Retention & deletion

Data is retained for the duration of the Alpha and backed up on a best-effort daily basis. You may request deletion of your account and associated data by contacting us; some data may be retained in backups for a limited period after deletion for operational recovery purposes.

5. Security

Data is encrypted in transit (TLS) and access is restricted by tenant-scoped authorization controls. No security measure is absolute; see our Terms of Use regarding Alpha-stage limitations.

6. Contact

Questions about this notice, or requests regarding your data, can be directed to the address provided in your invitation.

This is a placeholder document prepared for the Founder Closed Alpha and has not been reviewed by legal counsel. It should be replaced with reviewed terms before any public launch, and updated to reflect your actual subprocessors, region, and applicable data-protection law (e.g. GDPR, PDPL) once determined.