Draft — pending legal review. This page has not yet been reviewed by a lawyer and is not yet in effect. Bracketed placeholders below (such as [Contact Email]) need to be filled in with the platform's real details before this page is published for real users to rely on.
Legal
Privacy Policy
Last updated: [Date of publication]
1. What this policy covers
This Privacy Policy explains what information Mekit.GY ("we", "us"), operated by [Legal Entity Name], collects when you use the Service, how we use it, and the choices you have.
2. Information we collect
You provide most of this directly:
• Account details — name, email address, and password (or your Google account, if you sign in that way).
• Business information — your business name, sector, pathway, and other details you enter into onboarding, the diagnostic tools, or the Business Builder.
• Financial information — figures you enter into the Financial Tracker and Loan Ready's financial workspace (revenue, expenses, assumptions, funding requests).
• Documents you upload — identity, registration, compliance, and financial documents you choose to store in the Document Vault.
• Conversations with Rose — the questions you ask and the AI-assisted assessments you complete.
• Usage information — pages visited, features used, and similar technical data collected automatically to operate and improve the Service.
3. How we use your information
We use your information to:
• Provide the Service — run the tools you use, generate your reports and documents, and save your progress.
• Personalise Rose's responses and the questions our assessment tools ask, using your own business data.
• Communicate with you, including platform messages sent to your Mekit.GY inbox.
• Maintain security, prevent abuse, and comply with legal obligations.
We do not sell your personal information, and we do not use your business or financial data to train any third-party AI model.
4. Who we share information with
We rely on the following third-party service providers to operate the Service:
• Supabase — hosts our database, authentication, and the Document Vault's file storage.
• Anthropic — processes the text you send to Rose, and the structured data used to generate assessments, debriefs, and business plan content, in order to return a response. See Anthropic's own privacy policy for how they handle data sent to their API.
• Google — if you choose to sign in with Google.
We do not share your personal or business information with any other third party except where required by law, or with your explicit consent (for example, if you choose to connect with an independent advisor through Expert Connect).
5. Data retention
We retain your information for as long as your account is active, or as needed to provide the Service. You can request deletion of your account and associated data at any time by contacting us.
6. Your rights
You can access, correct, export, or request deletion of your personal information by contacting us at [Contact Email]. You can also review or delete most of your own information directly within the Service.
7. Security
We use industry-standard measures — including encrypted connections and access controls that restrict each user's data to that user — to protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
8. Children's privacy
The Service is not directed at, and should not be used by, anyone under 18 years of age. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new "last updated" date.
10. Contact
Questions about this Privacy Policy, or requests regarding your data, can be sent to [Contact Email].