Privacy notice
| Last changed | |
|---|---|
| To ask about it | support@runhoshin.com |
Who this notice covers
C-Level Solutions, a California general partnership, sells Run Hoshin. In this notice, "we" means the seller. This notice covers people who sign up, people whose company adds them to the app, people who write to us, and people who visit this site.
What we hold
If your company uses the app. Your company's records: names, email addresses, seats on the org chart, objectives, goals, A3s, one-on-ones, KPI readings, and reports. Your company can add your name to its org chart without giving you a login.
If you have a login. Your email address and what the sign-in service needs to check your password and your two-step sign-in, if you turn it on.
If you sign up. The email address, company name and your name that you type on the form.
Private notes. The writer's text in a one-on-one. Nobody else in your company reads it. Our staff can open a note only inside a logged visit, and each note they open goes on your company's record.
Records of what happened. An audit log of changes, and a record of each visit our staff make. A company admin can read the record of visits.
Email. The text of each email the app sends, and whether it was delivered. Also what you send us.
The contact form. The name, email address, topic and message that you type. The app stores them as an email and sends them to our mailbox, with your address as the one to answer.
Sign-in, signup and contact form limits. The app counts attempts against a hash, so that table holds no email address and no IP address.
This site. This site has no analytics and sets no cookies of its own. The free tools save your work in your own browser, and nothing goes to a server. The contact form sends what you type to the app. Cloudflare's check on that form may store its own data in your browser.
What each service receives
The subprocessor list names every outside service. The app has no AI feature, so it sends your company's records to no AI model.
| Service | What it receives |
|---|---|
| Supabase | Everything in "What we hold" that the app stores: your company's records, the logins, the email text and what you type on the contact form. |
| Vercel | Each request to the app and to this site, with the IP address and browser details. It runs the app, so your company's data passes through it during a request. |
| Resend | The name and address of each person we email, with each email's subject and text. That includes what you type on the contact form, which it carries to our mailbox. It tells us whether the email was delivered. |
| Stripe | What you type on its Checkout and billing portal pages, including your card details. Your card details go to Stripe and not to the app. Stripe tells us the state of your plan. Checkout isn't open yet. |
| Cloudflare | The signup page loads its Turnstile check, so Cloudflare receives your IP address and browser details on that page. The contact form loads the same check when you first select one of its fields. The app sends it only the check's token. |
| Model vendor, not yet named | The text of email and contact form messages you send us, because an AI agent working for us may read it. |
| Mailbox host, not yet named | Email and contact form messages you send us. |
We haven't yet confirmed how long each of these services keeps what it receives.
Where your data is stored
Planned, and not yet confirmed: the app in Vercel's iad1 region, near Washington, D.C., and the database in the Supabase region closest to it, in the US East. We confirm the region at plan step S5.2, when we set up the staging system, and this section will then name it.
We haven't confirmed where Stripe, Resend, Cloudflare, the model vendor and the mailbox host hold what they receive.
How long we keep it
We have no retention limit. A company's data stays until a company admin asks to delete the company, and that includes a trial that has ended. At the end of a trial, your company goes read-only and can still export. Nothing is deleted.
What you type on the contact form belongs to no company, so we keep it with no limit, and deleting a company doesn't delete it.
When a company admin asks to delete the company, a 30-day wait follows. After the wait, a scheduled job deletes the logins and every row of that company, audit log included. We keep one record: the company ID, a hash of its name, and two dates. We have no production backups yet, so we can't say how long deleted data stays in a backup.
The record is append-only, and the app has no tool that removes one person's rows. A company admin can deactivate you, and then you can't sign in. Your rows stay until the company is deleted.
Ask what we hold
You don't need an account to ask. Write to support@runhoshin.com and include the email address your question is about. A person or an AI agent working for us reads what you send.
We send one generic reply to every request: "If an account uses this address, we've sent it a sign-in link." That reply neither confirms nor denies that an account exists. We send the link only to the address on file, and we log the request.
If you have an account, sign in to see your record, or ask your company's admins. They control your company's records.
We don't yet have a written rule on other requests, such as a request to correct your record or remove it.
Questions
Write to support@runhoshin.com. See also the terms, the data processing addendum and the security page.