Privacy Policy

What we collect

• Account information: name, email address, and password (stored hashed by our auth provider).
• Organization and team data: organization/team names, roles, and membership.
• Challenge data you record: target conditions, current-condition facts, obstacles, experiments, and results.
• AI Kata Coach conversations tied to a challenge.

How we use it

To operate the Service: authenticate you, scope your organization's data to your organization, render your dashboards and storyboards, send transactional email (invites, password resets), and generate AI Kata Coach responses.

Third parties we use

• Supabase: hosts our database, authentication, and file storage.
• Anthropic: when you use the AI Kata Coach, the challenge's recorded target condition, current condition, active obstacle, and experiment history, plus your message, are sent to Anthropic's Claude API to generate a response. Anthropic processes this per their own API terms.
• Resend: delivers transactional email (invites, password resets, confirmations).
• Vercel: hosts the application.

Data access within your organization

Everyone in your organization can see your organization's challenges, teams, and roster. Row-level security scopes every query to your organization: no organization can read another organization's data.

Your rights

You can delete your own account at any time from account settings, which removes your profile and organization membership. Org admins can delete an entire organization and everything recorded under it. Both are immediate and permanent. For any other request, including a copy of your data, contact us below.

Cookies

We use a session cookie to keep you signed in. We don't use advertising or third-party tracking cookies.

Contact

Questions about this policy: saintmba@nexlean.ai.