Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email address, company name, and message content, team size, timing, selected objective and campaign attribution when you use our contact form. When you subscribe to our newsletter, we collect your email address, optional website URL, and content interest preferences.

On the Control homepage, analytics are off unless you allow them in Analytics preferences. Consented events record page views, selected workflow categories and funnel actions with an anonymous session identifier, not enquiry text or explorer questions.

Workflow explorer planning inputs stay in the current page until you choose to include them in a submitted enquiry. They are not saved as a draft on our server or in browser storage. Questions you explicitly send are processed by our server. In AI-assisted mode, OpenAI receives the question to select an answer from approved Control information. Guided mode selects an answer without a model provider. The mode is shown in the explorer. We do not store question text in our application database; provider processing and retention are subject to that provider’s terms. Please do not include confidential information.

2. How We Use Your Information

• To respond to your inquiries and provide our services
• To send newsletter content based on your stated interests
• To improve our website and services through analytics
• To run A/B experiments to optimize user experience
• To comply with legal obligations

3. Data Storage and Processing

Control enquiries are saved in private Google Cloud Firestore storage and synchronised to Attio CRM. Resend processes enquiry acknowledgements and optional follow-up emails. Optional Control follow-ups require email confirmation and include an unsubscribe link. Analytics data is processed by PostHog. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies and Tracking

We use functional cookies and PostHog analytics to understand how visitors interact with our site. On the Control homepage, you can allow or decline analytics using Analytics preferences in the footer. The choice is kept in local browser storage. Hashed IP-based counters limit enquiry and question abuse. These counters are configured to expire after two days; deletion follows the database expiry process.

5. Your Rights

You have the right to access, correct, or delete your personal data. You can unsubscribe from our newsletter at any time. To exercise any of these rights, contact us at hello@nextleap.studio.

6. Contact

For privacy-related inquiries, email hello@nextleap.studio.