Privacy baseline · draft for launch review

Your assessment should not become another source of uncertainty.

Human Systems collects the minimum information needed to generate your Product Health result, deliver the report, understand whether the tool is useful and respond when you ask for a conversation.

What is collected

Assessment answers, product context, optional founder hypothesis, name, email, company, consent choices, referral/UTM data and essential product events. The Scorecard does not need passwords, financial account details, identity documents or sensitive customer datasets.

Why it is used

To calculate and display the requested result, send the report, improve the methodology in aggregate, qualify requested Product Conversations and send optional follow-up only when separate marketing consent exists.

Providers

The initial service uses Fillout for assessment intake, Supabase for database infrastructure, Resend for email delivery and Vercel for application hosting. Provider and regional details must be confirmed before public launch.

Retention

Incomplete anonymous sessions are scheduled for deletion after 30 days, public result links expire after 90 days, raw webhook payloads after 30 days, and assessment/lead records after 12 months of inactivity unless a longer relationship or legal obligation applies. Suppression records may be retained as needed to honour opt-out choices.

Your choices

Report delivery and marketing are separate. You can decline marketing and still receive the requested report. The production policy will include a verified privacy contact for access, correction, export and deletion requests before public launch.