Privacy policy

1. Who we are

We are the data controller for personal data collected through our website and services, including the Juno and Theia products.

2. What we collect

Directly from you

• Name, email address, and any information you submit via our website forms.
• Booking and purchase details when you book a place on a masterclass, webinar, or Grant Clinic session, or buy access to Juno or Theia: your name, email address, billing address, the email address you will sign in with, and the information needed to take payment. Card payments are processed by Stripe, and we do not see your full card number.
• Session recordings: we record our masterclasses and webinars. If you speak or turn your camera on, your voice, your image, and the name you join with are in the recording, which we send to everyone who booked that session.
• Account credentials (email address, authentication tokens) when you sign up to use our products.
• Content you submit inside our products: business descriptions, problem statements, interview transcripts, feedback notes, and other information you enter in conversations with our AI agents.
• Uploaded files: interview transcripts (.vtt, .txt) and notes you attach to conversations.

Automatically

• Technical data: IP address, browser type, device type, and pages visited.
• Usage data: which features you use, session timestamps, and interactions within the product.
• Error and diagnostic data: stack traces and session context if you report a bug.

3. How we use your data

• To provide and operate our products.
• To take payment for, and run, the sessions you book, and to give you the access to Juno or Theia you have paid for.
• To send the recording of a session to everyone who booked it, to review and improve our sessions, and to check what was said if a question or complaint comes up. We only use a clip in our own content with the permission of anyone who appears in it.
• To send product-related emails (onboarding, analysis reports, feedback requests).
• To improve the products and analyse usage patterns.
• To respond to support requests and fix bugs.
• To comply with our legal obligations.

Our lawful bases under UK GDPR are performance of a contract, legitimate interests, and consent where applicable.

4. Who we share with

We share data only with the service providers (processors) that operate our infrastructure. Each is bound to process your data on our instructions and to appropriate security standards.

• Clerk (authentication)
• Neon (PostgreSQL database hosting)
• Anthropic (Claude AI models)
• OpenRouter (AI model routing and embeddings)
• Perplexity (live market research)
• Notion (internal session logging)
• Netlify (frontend hosting)
• Railway (backend hosting)
• Resend (transactional email delivery)
• HubSpot (website forms, calendar bookings)
• Google (sign-in via Google OAuth, if you choose it, and storage of our copies of session recordings)
• Sentry (error and performance monitoring)
• Stripe (payment processing when you book a session or buy access to Juno or Theia)
• TrainerCentral (the platform that hosts our masterclasses and webinars)

We do not sell personal data, and no AI provider uses your data to train its models.

How our AI providers handle your data varies by step. Models accessed through OpenRouter operate under a zero-data-retention arrangement and do not store your inputs or outputs. The Claude models we access through Anthropic's commercial API are retained for up to 30 days and then deleted; Anthropic does not use commercial API data to train its models, and keeps content longer only where required for legal or safety reasons. Our live market research provider, Perplexity, receives only a research query derived from your inputs, not your full conversation. The data we hold ourselves to run your account is covered in section 6.

5. International transfers

Some processors are located outside the UK. Where this is the case, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses to ensure an equivalent level of protection.

6. Data retention

• Juno and Theia: While you have paid access, we keep your data so you can come back to it. When your access ends, we keep your account and data for 90 days in case you buy again, then delete it.
• On deletion request: we will delete your account and associated personal data within 30 days, except where we are legally required to retain it.
• Beta accounts: If you used Juno or Theia during the private beta, we have emailed you. If you reply by 20 October 2026 you keep your account and data; otherwise we delete or anonymise it after that date.
• Booking and payment records: we keep these for as long as tax and accounting law requires, normally six years.
• Session recordings: available to everyone who booked for 30 days after the session, then removed from our course platform. We keep our own copy for 24 months after the session, then delete it.

7. Your rights

Under UK GDPR you have the right to access your data, request correction, request deletion, object to processing, data portability, withdraw consent, and complain to the UK Information Commissioner’s Office (ico.org.uk).

To exercise any right, email support@sharpinsights.co.uk. We will respond within one month.

8. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage at rest, strict access controls, and regular security reviews. No system is completely secure, but we work hard to minimise risk.

9. Cookies

Our products use cookies for authentication and essential session management only. This website also uses analytics cookies and one marketing cookie, which you can accept or decline in the cookie banner. Our cookie policy lists them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified to registered users via email. The “last updated” date at the top indicates when we last revised it.

11. Contact