PRIVATE BETA 1

SHIP Private Beta Privacy Notice

Version ship-private-beta-privacy-v3 — draft effective date: 7 October 2026.

This notice applies specifically to the SHIP Private Beta and explains how personal data is used for beta access, administration, security and evaluation.

Who is responsible

For the SHIP Private Beta, the data controller is David Wayne, who currently develops and operates SHIP personally.

Contact: feedback@strategichumanintelligence.com.

Information collected

• Your name, verified authentication identity and email address.
• Evidence that you accepted a specific version and digest of the Private Beta Confidentiality & Evaluation Terms, including the acceptance time.
• Feedback you choose to provide through the published feedback address.
• Necessary security and audit information generated by the implemented service controls.

The SHIP terms-acceptance record does not deliberately store your IP address or create a browser fingerprint.

Purposes and lawful basis

The terms checkbox records your agreement to the confidentiality and evaluation terms. It is not blanket consent to process personal data.

• Beta administration, access and communications: legitimate interests in operating a limited, invitation-only product evaluation.
• Terms-acceptance evidence and protection of SHIP: legitimate interests in documenting the exact terms accepted and protecting confidential pre-release software and intellectual property.
• Voluntary feedback and beta evaluation: legitimate interests in understanding defects and improving SHIP. You choose whether to provide feedback.
• Security and audit: legitimate interests in protecting the service, investigating misuse and maintaining proportionate operational evidence.
• Privacy requests and regulatory obligations: legal obligation where processing is necessary to meet applicable data-protection law.

Service providers

• Vercel hosts and protects the web Private Beta and may process technical request information needed to deliver and secure it.
• Supabase provides authentication, the London-region database and related managed infrastructure used to store identity-bound acceptance evidence and supporting security controls.
• Email services: Supabase's configured authentication email service delivers single-use sign-in links. Cloudflare Email Routing currently routes messages sent to the published feedback address to an existing destination mailbox. External delivery must be verified before invitations are sent.

Some providers or their subprocessors may process information outside the UK. The applicable contracts, transfer mechanism and current subprocessor locations must be confirmed before external invitations.

How long information is kept

The proposed Beta 1 schedule is: operational tester/contact information for the beta plus 90 days; exact terms-acceptance evidence for six years after participation ends; voluntary feedback for up to 24 months; and routine security/audit evidence for 12 months. Incident evidence may be kept for up to six years where needed for a legal claim or regulatory matter. These periods remain subject to human legal approval before live use.

Demonstration data only

Beta 1 uses demonstration and synthetic organisational data. Do not submit real employee personal data, confidential employer information or other sensitive organisational information.

Your rights

Depending on the circumstances, you may have rights to be informed, access your personal data, correct it, ask for erasure or restriction, object to processing based on legitimate interests, and receive portable data where the legal conditions apply. You may also complain about how your personal data is handled.

Send requests or complaints to feedback@strategichumanintelligence.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.