Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Name and email address when you subscribe to our newsletter
• Email address when you join a product waitlist (e.g., Luvaly)
• Information you provide when booking a call via Google Calendar
• Project details and business requirements shared during consultations
• For Strategist: your company website, public company research, corrections and answers, name, work email, and any separate marketing preference
• Strategist referral and campaign information and events such as starting an analysis or opening an opportunity; please do not enter confidential or sensitive personal information

2. How We Use Your Information

We use your personal information to:

• Respond to your inquiries and provide services
• Research your company, prepare and save the AI opportunity analysis you request, and deliver its access link by email
• Understand which acquisition channels lead to useful analyses and conversations, and prevent abuse of the service
• Send you updates about our services and products (with your consent)
• Notify you about product launches you've signed up for
• Improve our website and services
• Comply with legal obligations

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• With service providers needed to research, generate, store, host, and deliver your requested analysis
• To comply with legal requirements
• To protect our rights and safety

4. Third-Party Services

We use the following third-party services to operate our business:

• Supabase — Database storage for newsletter and waitlist signups, Strategist sessions and contact details
• Google Calendar — Appointment scheduling (subject to Google's privacy policy)
• Vercel — Website hosting and website analytics
• OpenAI — public web research and AI analysis of company information and your answers. We do not include your contact name or email in the analysis prompts.
• Resend — delivery of the analysis access link to your email address

5. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use:

• Supabase for secure database storage (EU region)
• SSL encryption for all data transmission
• Regular security audits and updates

6. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Newsletter subscriptions are retained until you unsubscribe. Waitlist signups are retained until the product launches and you are notified.

If you request a Strategist capacity notification, we save your email, company website and any linked analysis for up to 90 days to notify you when you can continue. This does not subscribe you to marketing. Strategist analyses expire after 90 days. Expired analyses and their associated contact details, answers and activity are removed through the service's scheduled cleanup. You may request earlier deletion by emailing ville@hermanfoundry.com.

8. Cookies and Tracking

Strategist uses essential, HTTP-only cookies to protect access to your saved analyses. We use Vercel Analytics, which does not use cookies, and record Strategist funnel events and campaign information to understand use of the service. Contact details, answers and report content are not sent as analytics event properties. Requesting an analysis does not subscribe you to marketing; any marketing permission is separate and optional.

On the AI Opportunity Map and AI Value Canvas we record anonymous interest signals, such as which opportunities are opened or picked, without identifying you. Your own list of opportunities explored in a visit stays in your browser tab and is sent only if you request your canvas by email or an analysis from Strategist, so that Ville can see what you are interested in when he replies.

With your permission, we use advertising cookies from LinkedIn (Insight Tag), Google (Google Ads) and Meta (Meta Pixel) to measure our advertising and to show relevant Herman Foundry content to visitors on those platforms, including by the pages and topics visited. These load only after you choose Accept, never on private analysis pages, and you can change your choice at any time under Cookie settings in the footer. Declining does not affect the site.

9. Updates to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated effective date.

10. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Last updated: September 2026