Effective date: [OWNER TO CONFIRM: effective date] ·
Last updated: [OWNER TO CONFIRM: date of final approval]
Our Privacy Policy covers visitors to businessingenuityinc.com and people who use our contact form.
This notice covers the Edgy platform: the accounts, purchases, reports, surveys, Expert Sessions and tools
that Business Ingenuity, Inc. provides to business customers. It also covers the people who answer our customers’ surveys.
[OWNER TO CONFIRM: whether to merge this notice into privacy.html once approved. The current Privacy Policy says information is used “solely to respond to your inquiry”, which does not describe the platform.]
1. Our role
- Account, purchase and support data: we decide how this is used. We are its controller.
- Survey responses: we collect and analyse these on behalf of the customer organization that runs the survey. That organization decides to survey its people and what to ask. For survey data, we act as its service provider (processor) under its instructions and our Terms of Service.
[OWNER + COUNSEL TO CONFIRM: controller/processor roles, and whether a data processing agreement (DPA) will be offered to customers]
2. What we collect
From account holders and buyers
- Account details: name, email address, password (stored only as a secure hash), and two-factor authentication settings if you turn them on.
- Company details: company name, website, sector and locations, which we use to prepare your reports.
- Purchase records: the product, price, date, receipt, and the phone number you give at checkout. Card payments are made on Stripe’s hosted checkout. Stripe processes your card details, and we do not receive or store full card numbers.
- Expert Session requests: your preferred date, time and time zone, the focus and audience of the session, any notes you add, and your phone number, so we can schedule with you.
- Usage and security records: sign-in events, actions taken in the workspace, and technical logs, used for security, support and troubleshooting.
- Cookies: the platform uses a strictly necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.
From survey respondents
- Survey answers, and any demographic answers the customer chooses to ask for, such as location, department, role or tenure.
- We do not ask respondents for their name or email address in order to answer.
- To prevent abuse, such as the same device submitting many times, we store a one-way hash of the respondent’s IP address, not the address itself.
- Customers may also upload survey results they have collected elsewhere, for example as a CSV export, for us to analyse.
Research inputs
Research reports are prepared from publicly available information about the organizations analysed, such as news, company websites,
public filings and market data. They are not prepared from personal data about individuals. Public sources can still name people,
for example executives, and those names may appear in a report.
3. How we use it
- to create and secure your account, and to deliver the products you buy, including generating, storing and delivering reports;
- to schedule and run Expert Sessions;
- to process payments and keep financial records;
- to send service emails, for example “your report is ready”, receipts and scheduling messages;
- to provide support, prevent abuse and keep the platform secure;
- to meet legal obligations.
We do not sell personal data, and we do not use survey responses for advertising.
4. AI processing
Reports are generated by AI models. To produce them, we send the relevant information to our AI model provider for processing:
your company details, research gathered from public sources and, for survey-based products, survey results.
[OWNER TO CONFIRM: whether individual survey responses (including any free text) or only aggregated metrics are sent to the AI provider]
[OWNER TO CONFIRM: that the AI provider’s commercial terms prohibit training its models on our API inputs and outputs, and state the provider’s retention period]
5. Who we share it with
We share personal data only with service providers that help us run the Services, and only as far as they need it:
- Render: application hosting and database
- Stripe: payment processing
- Anthropic: AI model provider used to generate reports
- Resend: transactional email
- Zoom: video sessions for Expert Sessions
- Public research and data providers (for example Exa, NewsAPI, Financial Modeling Prep, and SEC EDGAR): we send them search queries about the organizations being analysed, not customer personal data
- Cloudflare Web Analytics and Web3Forms: website analytics and the contact form, as described in our Privacy Policy
[OWNER TO CONFIRM: that this list of service providers is complete and current. For example, confirm whether customer details appear in internal Slack notifications.]
We may also disclose data if the law requires it, to protect our rights, or as part of a merger or sale of our business.
6. Survey confidentiality
- Results are reported to the customer organization in aggregate.
- We do not give the customer a list linking named individuals to their answers, and respondents are not asked for their names.
- Groups of fewer than 3 respondents are not shown separately in breakdowns. Small groups can still make individuals easier to identify, so we ask customers to choose breakdowns with care. [OWNER TO CONFIRM: that the 3-respondent floor applies on every surface — reports, dashboards and the Analytics Warehouse — not only in report breakdowns]
- The customer can export its own survey data from the platform. Once exported, the customer is responsible for handling that data.
7. Retention
- Account and report data: kept while your account is open, and then for [OWNER TO CONFIRM: period].
- Survey responses: [OWNER TO CONFIRM: period, and whether customers can ask for deletion once their report is delivered].
- Purchase and receipt records: kept for as long as tax and accounting law requires. [OWNER TO CONFIRM: period]
- Security and activity logs: [OWNER TO CONFIRM: period].
8. Security
We protect data with measures including encrypted connections (HTTPS), hashed passwords, optional two-factor authentication,
and access controls that separate each customer’s workspace. No system is perfectly secure. If we become aware of a breach
that affects your data, we will notify you as the law requires.
9. Where data is processed
Our service providers may process data in the United States and other countries. [OWNER TO CONFIRM: hosting region, and the transfer mechanism, such as Standard Contractual Clauses, if customers or respondents are in the EU or UK]
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to or restrict how it is used.
Account holders can make these requests to us directly.
Survey respondents should first contact the organization that ran the survey. Because we do not collect respondents’ names, we usually cannot identify an individual’s answers ourselves, but we will help the organization respond.
[OWNER + COUNSEL TO CONFIRM: which laws apply (e.g. CCPA/CPRA, GDPR, UK GDPR) and any required additional disclosures]
11. Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect their data.
12. Changes
We will post any changes to this notice on this page and update the date above. We will tell account holders about material changes.
13. Contact
Questions and requests about platform or survey data can be sent to
synergymatters@businessingenuityinc.com.