CAPA Health Check
Start assessment

Privacy Policy

This page explains what we collect, why we collect it, how long we keep it, and who helps us run the service. We write it in plain English on purpose.

What we collect

When you use the questionnaire, we collect your twelve multiple-choice answers and the email address you provide so we can deliver your report. If we ever offer an optional “paste text” flow for context, we will only store that text if you choose to send it—and we will treat it the same way as questionnaire answers for retention and deletion.

How we use it

We use what you submit only to:

  • Generate your personalized CAPA health check report,
  • Send the PDF to your email when you ask us to, and
  • Point you to our Slack community if you choose to join (via a public invite link—we do not sell your email to anyone).

We do not use your answers to train public models. Anthropic processes your submission under a zero-data-retention contract: your content is not retained by Anthropic for model training.

Retention

Questionnaire inputs auto-delete after 30 days. PDFs we generate for email delivery auto-delete after 90 days. Email engagement records (for example, that we sent you a PDF) are kept for 13 months for operational and abuse-prevention reasons, then removed unless law requires otherwise.

Analytics

The questionnaire and results tool pages do not load analytics. On the marketing landing page only, we may use Plausible (privacy-focused, no cookie banner by design) to see aggregate traffic. You can block it with any standard tracker blocker if you prefer.

Sub-processors

We rely on vendors who process data on our behalf:

  • Anthropic — AI analysis (zero-data-retention contract for eligible deployments).
  • Resend — transactional email delivery.
  • Vercel — hosting and edge delivery.
  • Supabase — database storage for submissions and engagement logs.

Deletion

Email security@playbookbysme.com or use the form on our Security page. We aim to confirm within five business days and complete routine deletion requests on the same timeline when technically feasible.

Data residency (v1)

For version 1 of this product, infrastructure and backups are US-region oriented. If we add regions later, we will update this page.