Privacy
Your data, straight
I built the Strategy Toolkit so that a leader with a pile on their desk could type it in and get a straight answer. Senior people type sensitive things into a box like that, so you should know exactly where your words go. This page says.
Who is responsible
Beyond Amazing Limited, registered in England and Wales, is the data controller. We are registered with the Information Commissioner's Office, registration number ZC176270. If you want to ask about anything here, email peter.gladdish@beyondamazing.co.uk.
The Reading, which is free
Whatever you type into the Reading is sent to our server and on to Anthropic, whose Claude model produces the reading, under commercial terms which mean your text is not used to train the model. We keep no copy of what you typed or of the reading you got back. Your pile stays in your own browser so you can re-run it; clear your browsing data and it goes. If you give us your email address to re-run a reading or print the pack, the address goes to Kit, our email service, with a tag saying it came from the Toolkit, and a signed cookie on your machine then remembers that you did. The cookie holds a hashed form of the address, never the address itself. When you tell us whether a reading understood your situation, we store your answer against a hash of what you typed, which cannot be turned back into your words.
The Working, which is paid
The Working keeps things, because that is the point of it. Under your account we store your pile and every version of it, every reading, every framework we populate for you and every edit you make, and a short log of when you signed in, ran, populated or exported, with no content in it. This lives in our Supabase database alongside the rest of Beyond Amazing's member data, under a policy that means only you, signed in, can read your rows. Your text goes to Anthropic in the same way as the Reading. Stripe handles payment; we hold your Stripe customer and subscription identifiers and never your card. Your email address goes to Kit with a tag saying you bought the Working.
How long
While you are paying, everything stays. When you stop, your piles stay readable and exportable, though you cannot run new ones. Twelve months after you last sign in we delete the lot, and we email you a month before we do. You can delete everything sooner yourself: Delete my account, on the account page, removes every row we hold, immediately, and there is no undo. Stripe keeps its own record of your payments for as long as the law requires it to; that record is theirs. If you cannot sign in, email me and I will do it for you.
Who else touches it
Cloudflare serves the site and runs our code. Supabase holds the Working's data. Anthropic produces the readings and the working. Stripe takes payment. Kit sends email. Each acts on our instructions under its own terms, and none of them is given your data for any purpose of its own. Anthropic's own retention of what is sent to it is set out in its policy, linked here; I would rather you read the current one than a copy of it here.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it, and you can complain to the ICO at ico.org.uk. Email the address above. I answer these myself.