We collect only what we need to deliver the service. We do not sell your data. We do not share it with advertisers. This policy explains exactly what we collect, why, and how long we keep it.
The data controller is VLOZ_NAZEV_SPOLECNOSTI, VLOZ_ADRESA, Czech Republic. Contact: [email protected].
We are subject to Czech data protection law and, where applicable, the EU General Data Protection Regulation (GDPR).
| Data | Why we collect it | Legal basis | Retention |
|---|---|---|---|
| Email address | Deliver your report, send follow-up communications with your consent | Contract performance / Consent | 3 years or until you unsubscribe |
| Assessment answers | Generate your maturity score and personalised report | Contract performance | 3 years |
| Company name, size, industry, URL | Personalise your report and benchmark against similar companies | Contract performance | 3 years |
| Strategy interview answers | Generate your Data Strategy Report | Contract performance | 3 years |
| Payment data | Process your purchase. We do not store card details — processed by Stripe. | Contract performance / Legal obligation | 10 years (legal requirement) |
| Website analytics (GA4) | Understand how visitors use the site, improve the product | Legitimate interest | 14 months (GA4 default) |
| Waitlist email | Notify you when a product launches | Consent | Until launch or until you unsubscribe |
Your assessment answers and strategy interview responses are sent to the Anthropic API (Claude) to generate your personalised report. Anthropic processes this data on our behalf as a data processor. Anthropic's API data processing agreement states that API inputs and outputs are not used to train their models by default.
We do not send personally identifiable information (name, email, company URL) to the AI. The AI receives only your answers to the assessment and interview questions, along with anonymised context (industry, company size).
We use Google Analytics 4 with IP anonymisation enabled. GA4 uses cookies to track sessions and behaviour. We do not use advertising cookies or third-party tracking pixels.
By using our website, you consent to analytics cookies as described in this policy. You can opt out at any time by installing the Google Analytics opt-out browser extension.
If you are in the EU or EEA, you have the following rights:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ).
We take reasonable technical and organisational measures to protect your data, including:
No system is 100% secure. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
We retain your data for 3 years after your last interaction with us, unless a longer retention period is required by law (e.g. 10 years for financial records). You may request earlier deletion at any time.
Our services are intended for business use by adults. We do not knowingly collect data from individuals under 16. If you believe a minor has submitted data, contact us and we will delete it promptly.