This policy describes how Incisive Platforms, Inc. ("Incisive", "we", "us"), a Delaware corporation, collects, uses, and protects information in connection with Guidelite ("the Service").

1. Information We Collect

We collect information you provide directly, including your name, email address, organization name, and any messages you send through our contact form or waitlist signup. When you use Guidelite, we collect the strategic planning data you enter (objectives, plans, actions, risk assessments, and related content).

We also collect technical information needed to run and secure the Service: IP addresses (used for rate limiting and abuse prevention), and error and diagnostic data when something goes wrong in your browser or on our servers (see Section 6).

2. How We Use Your Information

We use your information to:

Provide and maintain the Guidelite platform
Send you product updates and communications you have opted into
Respond to your inquiries and support requests
Diagnose errors and improve the reliability of the Service
Ensure platform security and prevent abuse

3. Data Storage and Security

Your data is encrypted in transit and at rest. We use Supabase (built on PostgreSQL) with row-level security policies that enforce strict multi-tenant data isolation, so your organization's data is not accessible to other organizations.

4. Service Providers

We do not sell your personal information or organizational data. We share data only with the service providers that operate parts of the platform for us (including hosting, database, email delivery, payment processing, error monitoring, and security), and only to the extent each needs to perform its function.

The full current list, with what each provider receives and where it processes data, is published on our Data Processors page. We will update that page before adding or replacing a provider that processes customer data.

5. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Request an export of your personal or organizational data
Opt out of marketing communications at any time

To exercise any of these rights, contact us at the address in Section 9. We respond to verified requests within 30 days.

6. Cookies, Local Storage, and Session Replay

We use essential cookies and browser storage to keep you signed in and to remember interface preferences. We do not use advertising or cross-site tracking cookies. Every item is listed on our Cookies & Browser Storage page.

To diagnose errors, we use Sentry. When an error occurs in your browser, Sentry may send a replay of the moments leading up to it (page structure, clicks, and navigation). Sessions without errors are not recorded. Replays mask all on-screen text and form inputs and block images and media, so the content you enter is not captured. Request cookies and headers are removed from error reports before they are sent.

7. Data Retention

We retain your data for as long as your account or your organization's subscription is active. When you ask us to delete your account or your organization's data, we delete it from our live systems within 30 days of verifying the request, except where we must keep it by law. Copies in our database backups expire on the backup provider's normal rotation schedule.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the platform, and the date at the top of this page will show when it last changed.

9. Contact

Incisive Platforms, Inc. For privacy-related inquiries, contact us at hello@guidelite.app.

Privacy Policy