Privacy Policy

Who we are

ScaleupKickstarter is operated by hibretOne, a not-for-profit Community Interest Company (CIC) based in Birmingham, United Kingdom. In this policy, “we”, “us” and “our” mean hibretOne CIC, the data controller responsible for your information.

What we collect

We aim to collect only what we need to give you a useful diagnostic. That means:

• The business details you enter into the diagnostic: the answers you type during the conversational intake, such as what your business does, its stage, and the challenges you describe.
• The email you provide at the gate: when you choose to save your result to an account, we collect your email address so we can store and return your report to you.
• Basic usage analytics: aggregate information about how the app is used, such as pages visited and general device or browser type, so we can keep the service working and improve it.
• Questions you ask the assistant: when you are signed in, you can ask the ScaleupKickstarter Assistant about the service. Your question and the last few messages of that conversation are sent through OpenRouter to an AI model to write the answer, using only providers that do not keep it for training. We do not store the conversation. We keep only a count of how many messages each account sends each day, so we can apply a fair-use limit. Please do not type personal or sensitive information into it.
• Questions you ask about a report: on a report page, you can ask the assistant about that report. Your questions and its answers are saved with that report, so you can come back to them. We use them only to answer you, and we send them to our AI provider to produce each answer. They are deleted when the report is deleted.

How we use your information

We use the information above to:

• Generate your growth-readiness score and full diagnostic report.
• Save your report to your account so you can return to it.
• Answer the questions you ask the assistant.
• Contact you about your account, your saved results, and important service updates.
• Understand and improve how ScaleupKickstarter performs.

Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

• Performance of a contract: to generate and save the diagnostic you asked us to produce, and to manage your account.
• Legitimate interests: to keep the service secure, reliable, and improving, in a way that does not override your rights.
• Consent: where we ask for it, for example any optional communications. You can withdraw consent at any time.

We do not sell your data

We do not sell, rent, or trade your personal information. We are a not-for-profit and we do not sell your data. Paid plans, when they launch, will be published on our pricing page. We share information only with the service providers that help us run the app (for example secure hosting), and only to the extent needed to deliver the service to you.

Cookies

We keep cookies minimal. We use essential cookies that are needed for the app to function, such as keeping you signed in and securing your session. Where we use limited analytics, it is to understand overall usage rather than to track you across other sites. You can control cookies through your browser settings.

If you change a setting in the accessibility menu, such as text size or contrast, your choices are saved on your own device, in your browser’s local storage under the name asw-user-settings (or in a cookie of the same name if local storage is not available), so they are still in place when you come back. They are never sent to us. You can undo them with Reset settings in the menu, or clear them through your browser.

Data retention

We keep your diagnostic and account information for as long as your account is active, so your reports remain available to you. If you ask us to delete your account, or after a reasonable period of inactivity, we will delete or anonymise your information, unless we are required to keep certain records for legal reasons.

Your rights

Under UK GDPR you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Deletion: ask us to delete your personal information, subject to any legal obligations to retain it.

You also have rights to restrict or object to certain processing, and to data portability. To exercise any of these rights, contact us using the details below. You have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, if you have concerns about how we handle your data.

How to contact us

For any privacy question, or to exercise your rights, email us at hello@hibretone.org. This address is a placeholder pending confirmation of our published contact details.