Privacy policy

This policy explains what [operator name] (“we”) collects during the pilot and why. [Check this against the privacy law that applies to you and your participants, e.g. the GDPR/UK GDPR, the Australian Privacy Act or US state laws.]

What we collect

• A pseudonymous participant ID, derived from your invite code. We hold a separate list linking codes to the people we invited, so that we can follow up on feedback. [Say who holds it and how long it is kept.]
• Usage events: pages viewed, which company you select, which sections of the page come into view, which assumptions you change (the field, not the value), when you reset assumptions, and errors. These tell us which features are useful.
• What you choose to tell us: feedback (an optional thumbs up or down and an optional comment or idea), companies you ask us to add, and answers to a short survey shown from your third visit. These are stored in our database with your pseudonymous participant ID and the company you were viewing. Please do not include personal details in free-text answers.
• Technical data processed by our hosting and analytics providers, such as browser type and approximate location. [State whether IP addresses are discarded; the setup guide recommends discarding them.]

The launch waitlist

If you join the waitlist we store your email address, your optional answers (which markets you invest in, and whether you would pay for full access), where you came from if the link said so (for example “instagram”), and the date you joined. We use your email only to tell you about the launch and to invite you in. We do not sell it or share it with anyone except the database provider that stores it. [Name the email service if you use one to send the launch emails.] You can ask us to remove you at any time by emailing [contact email].

Apart from the waitlist, we do not collect your name, email or payment details through the website itself.

Cookies and browser storage

• pilot_access: keeps you signed in to the pilot (essential, 90 days).
• pilot_participant: your pseudonymous participant ID, used to group your visits (90 days).
• dcf_pilot_visits and dcf_pilot_survey_done (browser storage, on your device only): a visit count and whether you have answered or closed the survey, so that it is shown once.

The analytics script is configured not to set its own cookies. Signing out clears the two cookies.

Who processes the data

• Hosting: Vercel (website) and Render (valuation service). [Add regions.]
• Analytics: PostHog. [Add region: US or EU cloud.]
• Feedback database: [provider, e.g. Neon; add region].
• Feedback summaries: Anthropic (Claude). When we ask for a summary of themes, the text of comments, ratings, survey answers and company requests is sent to Anthropic to be summarised. Participant IDs are not sent. [Check Anthropic's data-retention terms for API use and state them here.]

How long we keep it

[e.g. usage events are deleted 12 months after the pilot ends.]

Your rights

You can ask us to access or delete data associated with your participant ID by emailing [contact email].