Privacy policy

Controller: Aurion Dynamics, a sole proprietorship (eenmanszaak) registered in the Netherlands under KvK number 96918756, owned and operated by Jeroen Kopczinski (“Aurion Dynamics”, “we”, “our”, “us”)

Product: Phaseplane – a web-based application for business diagnosis and decision support, and the related websites. Phaseplane is a product operated by Aurion Dynamics.

This version of the policy applies from 25 September 2026. It describes how we process information when you use Phaseplane, browse our websites (including the introduction form at phaseplane.io/contact and the support form at phaseplane.io/support), and interact with our services. We may update this document; the “last updated” date at the top reflects the current version.

1. Introduction

This Privacy Policy explains how Aurion Dynamics processes personal and organizational information when you use Phaseplane, our web-based application for understanding complex business problems and the decisions that follow from them.

We are committed to protecting your privacy and to complying with the General Data Protection Regulation (GDPR) and, for users in the United Kingdom, the UK GDPR.

By using Phaseplane, you agree to the terms of this Privacy Policy.

2. Data We Collect

We collect and process the following categories of data:

a. Account Information

• Name, email address, and authentication details (via Clerk).
• Organization name and role (if provided).

b. Workspace & Application Data

• Workspace content, such as descriptions of a situation, evidence you enter or upload, analyses, diagnoses and decisions (and, in older workspaces, structures such as strategic intents, signals and problems).
• Free-text entries provided by you or your organization.
• Metadata such as timestamps and user IDs.

c. AI Interaction Data

• Content submitted for AI-supported analysis (for example situation descriptions, evidence excerpts, questions and conversations with in-product assistants).
• Processed by configured AI providers (typically OpenAI and/or Anthropic, depending on feature and environment) to generate outputs.
• Some features that look up public web sources send search queries to a search provider (Tavily).

d. Payment Data

• If you pay through our online checkout, payment details are processed by Stripe.
• We do not store card numbers or sensitive payment data ourselves.

e. Usage & Analytics

• Logs (via Supabase & Vercel).
• Site analytics (Google Analytics, Vercel Analytics and Vercel Speed Insights), used only if you allow optional analytics in the cookie settings.
• Device/browser information, IP address, session activity.

f. Contact, introductions and support

• If you use the introduction form or the support form, we collect what you submit (e.g. name, email, topic, message, optional reference label).
• Messages are delivered by email (Resend). We use them to respond to your request and, where you are exploring a design partnership, to follow up on it. We may keep business contact details and related correspondence in our business email (Microsoft 365) and customer-relationship system (HubSpot).
• We may use Cloudflare Turnstile on the forms to reduce spam; Turnstile processes minimal technical data to verify the request. We do not use it for marketing profiling.
• To limit abuse, the forms apply rate limits based on a technical identifier of the request, such as the IP address.

3. How We Use Your Data

• Provide, maintain, and improve Phaseplane.
• Authenticate users and manage workspaces.
• Run AI-supported analysis on the information you provide.
• Process payments and subscriptions.
• Respond to introductions, support requests and feedback.
• Prevent fraud, abuse, or misuse.
• Comply with legal obligations.

4. Legal Basis for Processing (GDPR)

• Contract necessity – to deliver the Phaseplane service.
• Consent – for optional analytics and cookies.
• Legitimate interest – to improve functionality and security, to respond to enquiries and follow up on them, and to handle proportionate support and abuse prevention (including bot protection and rate limits on public forms).
• Legal obligation – to comply with applicable laws (e.g., financial reporting).

5. Data Sharing and Processors

We share data only with providers we use to operate Phaseplane and our business. Depending on the feature you use, these include:

• Supabase: database and storage.
• Clerk: authentication and user management.
• Vercel: application hosting, and Vercel Analytics and Speed Insights (only with your consent).
• Google: Google Analytics (only with your consent).
• Stripe: subscription and payment processing.
• OpenAI and/or Anthropic: AI model providers for analysis and assistant features, depending on configuration.
• Tavily: web search for features that look up public sources.
• Resend: transactional email (e.g. delivery of introduction and support messages).
• Cloudflare: Turnstile verification on our forms.
• Microsoft 365, HubSpot and Brevo: business email, customer-relationship administration and email communications.

Some of these providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs), where required.

We do not sell your data.

6. Data Retention

• Account data – retained while your account is active.
• Workspace data – retained until you delete your workspace or request deletion.
• AI interaction data – stored in our systems as needed for the product; content sent to AI providers is processed by them to generate outputs, under their terms for business use of their services.
• Support and contact messages – retained only as long as needed to handle your request and for ordinary business records, unless a longer period is required by law.
• Payment records – retained as required by law (e.g., 7 years for tax compliance in NL).
• Logs/analytics – retained for a limited period, in line with our providers’ settings and our operational needs, and longer only where needed for security.

We may anonymize and aggregate data for statistical or research purposes.

7. Sensitive Data Disclaimer

Phaseplane is not designed for processing sensitive personal data (such as health information, political opinions, or union membership). We strongly discourage including such data in workspaces, evidence, forms or support messages. If you choose to do so, you remain the controller of that data.

8. Your Rights

Under GDPR and other privacy laws, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent for optional analytics at any time, through Cookie settings at the foot of every page.
• Lodge a complaint with your supervisory authority (Autoriteit Persoonsgegevens in NL).

Requests can be made via: j.kopczinski@auriondynamics.com

9. Children’s Data

Phaseplane is not directed to children under 16 years of age. We do not knowingly process children’s data.

10. Security

We implement appropriate technical and organizational measures including:

• Hosting of our primary database in the EU (Supabase).
• Encrypted data transfer (TLS).
• Role-based access controls.

We may expand these measures (such as audit logging or enhanced monitoring) as Phaseplane develops.

11. International Users

If you access Phaseplane from outside the EU, your information may be transferred and processed in the EU and in other countries where our providers operate, including the US. We apply the protections described in this policy.

12. Changes

We may update this Privacy Policy to reflect changes in law or product features. We will notify you of material changes via the app or email.

13. Contact

Aurion Dynamics (sole proprietorship)

Owner: Jeroen Kopczinski

KvK: 96918756

Cuppenpedje 10

5961 TM Horst

The Netherlands

Email: j.kopczinski@auriondynamics.com