Privacy Policy

Who controls the data

The data controller is Product & Growth Partners. For privacy questions, deletion requests, withdrawal of consent, or any request related to your personal data, contact david.davila@product-growth-partners.com.

Data we may collect

When you use the website, Ask David, contact links, or social channels, we may collect information you choose to provide, including your name, email address, company, product context, questions, conversation history, and any information you include in your messages. We may also collect basic technical and usage data, such as device information, page interactions, analytics events, timestamps, session identifiers, and security verification signals. Website traffic may be measured with Google Analytics 4, and Ask David session records may be stored in Supabase.

Why we use it

We use personal data to answer questions through Ask David, understand the product problem you are asking about, respond to contact requests, improve the quality and safety of the website, protect the service from abuse, and monitor aggregate site performance. We do not sell your personal data.

Legal basis

Depending on the interaction, processing may rely on your consent, our legitimate interest in operating and improving the website and assistant, the need to take steps before entering into a potential service relationship, or compliance with legal obligations. Where processing relies on consent, you can withdraw that consent at any time by emailing us.

How long we keep data

Ask David session data and contact details are kept for up to 1 year from the moment they are recorded in the database. Before keeping data for longer, Product & Growth Partners will send a reminder asking you to confirm whether the data may continue to be retained, where contact details are available. If confirmation is not received, the data will be deleted or anonymised unless there is a legal reason to keep it for longer.

Service providers

We may use trusted providers to host the website, store database records, run the Ask David assistant, provide security checks, manage analytics, and handle contact workflows. This may include Vercel for hosting, Supabase for database storage, OpenAI for AI-assisted responses, Google Analytics 4 for traffic measurement, Cloudflare Turnstile for human verification, and contact tools when you choose to use them. These providers should only process data as needed to provide their services to Product & Growth Partners.

International transfers

Some providers may process data outside the European Economic Area. Where this happens, Product & Growth Partners will aim to rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, or equivalent contractual and technical protections where applicable.

Your rights

If GDPR or similar privacy rules apply to you, you may have the right to:

• access the personal data held about you
• ask for inaccurate or incomplete data to be corrected
• ask for data to be erased when it is no longer needed or when processing is unlawful
• request restriction of processing in specific cases
• request data portability where applicable
• object to processing based on legitimate interests or direct marketing
• withdraw consent at any time, without affecting lawful processing already carried out

We will aim to respond to privacy requests without undue delay and normally within 1 month. You also have the right to lodge a complaint with your local data protection authority.

Automated decisions

Ask David may generate automated answers based on the available corpus and session context, but it is not used to make decisions that produce legal or similarly significant effects about you.

Updates

This policy may be updated as the website, analytics setup, or Ask David assistant evolves. The effective date above will be updated when meaningful changes are made.