Privacy policy

What we collect

Account information (name, email, password hash), company profile data, and operating metrics you enter (for example MRR, ARR, runway). We also store visibility-tier settings that control what investors can see.

How we use it

To provide the TrueNorth workspace: compute metrics from your inputs, share canonical values with linked investors, and produce contribution-gated cohort benchmarks. We do not sell your data.

Subprocessors

• Neon — Postgres database hosting (metric periods, accounts).
• Vercel — application hosting and edge delivery.
• Stripe — investor subscription billing (when enabled).
• Resend — transactional email (feedback digests and deck notifications, when configured).

Retention

We retain account and metric data while your account is active. You may request deletion by contacting us; we will remove or anonymize data within a reasonable period unless law requires retention.

Security

Traffic is served over HTTPS. Sessions use secure, HTTP-only cookies via Auth.js. Passwords are stored as bcrypt hashes.

Contact

Questions about this policy: hello@truenorth.guru. See also our FAQ.