Privacy Policy

1. Who we are

This Privacy Policy explains how Shuttlewright, operated by Fuseini Mohammed, handles personal information. Contact: fuseini.metadata@gmail.com.

2. What we collect

• Contact details you send us, such as your name, work email, company and the content of your messages.
• Account details for workspace users, such as email address and sign-in records. For Signal Watch signup, we store your email address, workspace name, a password hash and a hashed verification token. A short-lived encrypted delivery queue holds the verification message until sending completes or the link expires; queue metadata is removed after one day. The verification link expires after 60 minutes and can be used once. No workspace account is created until you confirm the link.
• Customer Content: the source documents and questionnaires you give us for the pilot, and the drafts we produce from them.
• Usage and audit records: runs, approvals and changes inside the workspace, plus basic technical logs such as IP address and browser type.
• Payment details are collected and processed by Polar, our merchant of record. We do not see or store your full card details.

3. How we use it

We use personal information to reply to you, provide and support the Service, keep it secure, keep required business and audit records, and meet legal obligations. We use Customer Content only to deliver the Service to you. We do not sell personal information. We do not train any model on your Customer Content, and we do not allow our providers to. See section 4 for what each provider's own terms say.

4. Who we share it with

We share information only with service providers that help us run the Service, and only as needed for that purpose. We may also disclose information if the law requires it. These are our subprocessors:

• Render hosts the application servers.
• Neon hosts the database that stores workspaces, source documents, questionnaires and the audit log.
• Cloudflare (Workers AI) runs the language model that words a draft answer. When a question has matching evidence, the question text and the matching sentences from your approved sources are sent to Cloudflare. Nothing else from your workspace is sent. If Cloudflare is unavailable, the draft stays as the verbatim sentences from your source, and no other provider is used. Cloudflare documents that it does not use Workers AI customer content to train any model or to improve its services, and does not make it available to other customers.
• Polar, our merchant of record, processes payments.
• Our email provider sends and receives the messages we exchange with you. For Signal Watch signup, Google Gmail receives your email address and the verification message so it can deliver your confirmation link. Verification emails are sent from our business Gmail address by Instinct. This signup message is not a marketing subscription.

You can delete a single source, or all workspace data, from inside the workspace. Deleting a source also removes the draft answers that cited it.

5. How long we keep it

We keep Customer Content for as long as your engagement lasts and delete or return it when you ask, or within 90 days after the engagement ends. We keep business, payment and audit records as long as we need them for legal, tax and accounting reasons.

6. Security

We use access controls, encryption for stored connector settings, separation between customer workspaces, and a tamper-evident audit log. See our trust page for what we do and do not claim. No system is perfectly secure, but we work to protect your information and will tell you without undue delay if a breach affects your data.

7. Your rights

Depending on where you are, you may have the right to access, correct, delete or export your personal information, or to object to how we use it. To make a request, email fuseini.metadata@gmail.com. You can also complain to your local data protection authority.

8. International transfers

Our service providers may process information in other countries. Where required, we rely on appropriate safeguards for those transfers.

9. Changes

We will post any changes on this page with a new "Last updated" date.