Simon Leadership Group LLC ("we," "us," "our," or "Company") operates StratPlanArc (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

StratPlanArc is an AI-powered strategic planning platform designed to help organizations (primarily nonprofits, government agencies, and small businesses) develop strategic plans from an intake form, uploaded reference documents, and stakeholder feedback.

1. Information We Collect

1.1 Account Information

Generating a plan requires an account. When you register we collect your email address, your name (optional), and a password. Passwords are stored only as salted hashes, never in plain text. If you redeem a promo code, we record that redemption.

1.2 Organization and Planning Information

• Organization Information: Organization name, type, size, industry, and website URL
• Strategic Context: Mission statement, organizational goals, current challenges, strategic priorities, stakeholder groups, and planning timeframe
• Generated Content: The plans, plan versions, KPIs, action items, and progress entries the Service generates or you record, plus any star ratings or comments you leave about a plan

1.3 Uploaded Documents

You may upload reference documents (PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, RTF) to inform plan generation. We store the file in cloud object storage and store the text extracted from it in our database. See Section 5 for how long we keep them.

1.4 Stakeholder and Participant Data

When you invite stakeholders to a survey or a feedback round, you enter their email addresses and, optionally, their names. We use those addresses only to send the survey and voting invitations you request and the round notifications that follow. Stakeholders who respond provide their name and role (optional) and their answers (strengths, weaknesses, opportunities, threats, comments, votes, and rankings). You are responsible for having the right to share your stakeholders' contact details with us.

1.5 Lead Information

If you request the sample plan or planning checklist from our website, we collect the email address, name, and organization you enter.

1.6 Information Collected Automatically

• First-party analytics: We record page-view and funnel events (for example "plan started" or "plan completed") in our own database, together with the plan or session they relate to and a truncated hash of your IP address. We do not use third-party advertising or ad-tracking services.
• IP address: Used transiently for rate limiting and in server logs.

1.7 Payment Information

Payments are processed by Stripe. We store your Stripe customer identifier and your subscription tier and status. We never see or store your card details; Stripe handles those under its own privacy policy.

2. ⚠️ Important: No Confidentiality Assurance for Uploaded Documents

By uploading documents or submitting content to StratPlanArc, you acknowledge and agree that:

• Uploaded documents are processed by AI systems and stored in cloud infrastructure
• We cannot guarantee that uploaded materials will remain confidential
• You should NOT upload confidential financial data, trade secrets, proprietary information, or personally identifiable information (PII) beyond what is necessary for the strategic planning process
• Sensitive information such as social security numbers, credit card numbers, banking information, passwords, health records, or other highly sensitive PII should NEVER be uploaded
• You are solely responsible for determining what information is appropriate to share with StratPlanArc
• You assume all risk associated with uploading any documents or content to the platform

If you have questions about whether specific information is safe to upload, err on the side of caution and do not upload it.

3. How We Use Your Information

• Plan Generation: To understand your organization's context and generate your strategic plan and its revisions
• Stakeholder Input: To send the survey and voting invitations you request and to synthesize the responses into your plan
• Service Delivery: To run your account, your plans, and your subscription
• Communications: To send transactional email: a welcome message and short follow-up sequence after signup, reminders about an unfinished plan, survey and round notifications, and replies to support requests
• Security: To rate-limit abusive traffic and protect accounts
• Product Improvement: To review our own first-party usage events and improve the Service

4. AI Processing and Model Training

To generate your plan, we send your organization intake data, the text extracted from your uploaded documents, and your stakeholders' survey responses and round feedback to Anthropic's Claude API. Anthropic processes that data under its API terms and does not use API inputs or outputs to train its models.

We do not use your organization's data, documents, or strategic content to train AI models. Your data is used solely to generate and revise your organization's plan.

5. Data Retention

• Account and Plans: Retained for as long as your account exists
• Uploaded Documents: Deleted from cloud storage and from our database 30 days after your plan is generated. Removing a document from the intake page deletes the file from storage right away; its extracted text is deleted on the same 30-day schedule.
• Stakeholder Data: Participant email addresses, survey responses, and votes are retained with the plan they belong to
• Analytics Events: Retained in our database
• Deletion on Request: Email brian@tapiki.com and we will delete your account data within 30 days, except where we are legally required to retain records

6. Third-Party Services

StratPlanArc uses the following third-party services:

• Anthropic (Claude API): AI plan generation and revision, as described in Section 4
• Stripe: Subscription payments and the billing portal
• Resend: Transactional email delivery
• Cloudflare R2: Cloud object storage for uploaded reference documents
• Amazon Web Services: Application hosting (EC2, managed through Laravel Forge)
• Neon: Managed PostgreSQL database hosting
• Google Fonts: Typography; your browser requests font files from Google's servers when a page loads

These providers receive only the data needed to provide their service to us.

7. Data Security

• Encrypted data transmission (HTTPS/TLS), including our database connections
• Passwords stored as salted scrypt hashes
• Plan-scoped access tokens and account authentication for plan changes
• Rate limiting on authentication and generation endpoints

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you
• Right to Correction: You can request that we correct inaccurate or incomplete information
• Right to Deletion: You can request deletion of your data (subject to legal retention requirements)
• Right to Object: You can object to certain uses of your data
• Data Portability: You can request your data in a portable, machine-readable format

To exercise these rights, contact us at brian@tapiki.com.

9. Cookies and Local Storage

StratPlanArc does not set cookies. We use your browser's local storage to keep you signed in (your login token and basic account details). Clearing your browser's site data signs you out.

10. International Data Transfers

StratPlanArc is hosted in the United States. If you access StratPlanArc from outside the US, your information will be transferred to and processed in the United States. By using StratPlanArc, you consent to this transfer.

11. Children's Privacy

StratPlanArc is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time and will update the date at the top of this page when we do. Continued use of StratPlanArc constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions, requests, or concerns, contact:

Simon Leadership Group LLC
Email: brian@tapiki.com

---

See also: Terms of Service