Privacy Policy
This policy explains what personal data Spearhead Analytica LLC collects, why we collect it, who else processes it on our behalf, how long we keep it, and what you can ask us to do with it. It covers this website and our scoping interview tool.
Who we are
Spearhead Analytica LLC is the controller of the personal data described here. We are a limited liability company incorporated in Delaware, in the United States. You can reach us about anything in this policy at our contact form.
What we collect
When you browse this website
We collect very little. We do not use advertising trackers and we do not sell or share data with advertisers. Our hosting provider processes standard server request information, including your IP address, the page you asked for, the time, and your browser's user agent, as a necessary part of delivering the page to you and keeping the site up.
If you switch between the light and dark theme, we store that choice on your own device under the name spearhead-theme so the site remembers it next time. It stays on your device, it is not sent to us, and it holds nothing except the word light or dark. Clearing your browser's storage removes it. We use no other cookies or device storage.
When you contact us
Our contact form asks for your name, your email address, your organization if you want to give one, and a description of what you want to build. Name, email address, and the description are needed to answer you at all. We use what you send to reply, to work out what the project would involve, and to keep a record of what was discussed.
The form is delivered to us as email through Resend. We do not store form submissions in a database on this website. Please do not put anything sensitive in it: no passwords or credentials, no health or financial details, and nothing classified or export controlled. If your project involves material like that, say so in general terms and we will arrange a safer way to discuss it.
We do not add people who contact us to a marketing list and we do not send marketing email.
When you use the scoping interview
This is where we collect the most, so it is worth reading carefully. If you are given a private link to our scoping interview, we collect and store:
- Your name, organization, and contact email address.
- The full conversation between you and the assistant, stored as a transcript.
- Any files you choose to upload, and information we derive from them such as page counts and document structure.
- The structured brief the assistant produces at the end.
- Technical usage records, such as when the link was opened.
Artificial intelligence processing
The scoping interview is conducted by an AI model operated by Anthropic, and what you type is sent to Anthropic for processing. If you upload a document and the assistant reads it, the contents of that document are also sent. We tell you this plainly because you should be able to decide what to put into the conversation. Do not upload anything you are not comfortable having processed this way, and please do not upload classified, export-controlled, or otherwise restricted material.
Why we process it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry | Steps taken at your request before entering a contract |
| Running the scoping interview and preparing a quote | Steps taken at your request before entering a contract |
| Delivering work you have engaged us for | Performance of a contract |
| Keeping the site secure and working | Our legitimate interest in operating a functioning service |
| Keeping business and tax records | Legal obligation |
| Establishing, exercising, or defending a legal claim | Our legitimate interest in protecting our legal position |
Who processes data on our behalf
We use a small number of service providers. What each one handles depends on the service we use it for, and the table below says which is which.
| Provider | What it does |
|---|---|
| Vercel | Hosts this website and the scoping interview |
| Supabase | Stores interview records, briefs, and uploaded files |
| Anthropic | Provides the AI model that conducts the interview |
| Resend | Delivers email such as your invite and our notifications |
International transfers
We are a United States company and our service providers are established in the United States, so your data is processed there.
How long we keep it
- Enquiries that do not become projects: your message stays in our email. We review it at least once every 12 months and delete enquiries we are no longer in contact about. We may keep something longer where the law requires it, or where we need it for a legal claim.
- Scoping interviews: the transcript, brief, and any uploads are kept for as long as we are actively considering or delivering the project, and deleted on request.
- Project records: kept for the duration of the engagement and afterwards where we need them for legal, tax, or accounting reasons.
If you want your scoping interview and uploads deleted, ask us and we will do it.
Your rights
Depending on where you live you may have some or all of the following rights over your personal data. We will not charge you for exercising them and we will not treat you differently for having done so.
- Ask for a copy of the data we hold about you.
- Ask us to correct it if it is wrong.
- Ask us to delete it.
- Ask us to restrict how we use it, or object to our using it.
- Ask us to provide it in a portable form.
- Complain to your data protection supervisory authority if you think we have handled your data badly. We would rather you told us first so we can put it right.
To exercise any of these, email our contact form.
Security
Uploaded files are stored in private storage and are not publicly reachable. Access to client material is limited to what is needed to do the work. We keep API credentials on the server side only, never in your browser. No system is perfectly secure. If a breach affects your personal data we will look into it, and we will tell you and the relevant authorities where the law requires us to.
Children
This is a service for organizations. It is not directed at children and we do not knowingly collect data from them.
Changes
If we change this policy we will update the date at the top. Where the law requires us to tell you directly about a change that affects data you have already given us, we will use the contact details we hold.