Data Processing Consent

Last Updated: January 15, 2025

This document explains how PROJAH processes your data to provide business planning services and your rights regarding this processing.

1. Overview of Data Processing

When you use PROJAH, we process various types of personal and business data to deliver our comprehensive business planning platform. This consent specifically covers the processing activities necessary to provide you with our core services.

By consenting to data processing, you authorize PROJAH to:

  • Store and process your business plans, financial models, and strategic documents
  • Use AI and machine learning to analyze and generate business content
  • Process personal and professional information for validation and endorsement preparation
  • Share data with authorized collaborators (team members, advisors, consultants)
  • Generate insights, recommendations, and automated suggestions
  • Create and export documents, reports, and presentations
2. Types of Data We Process

2.1 Business Information

  • Business ideas, concepts, and descriptions
  • Business plans (all sections including executive summaries, market analysis, operations)
  • Financial projections, revenue models, and cost structures
  • Market research and competitive analysis
  • Product or service descriptions
  • Customer personas and target market data
  • Strategic goals and milestones

2.2 Personal Professional Data

  • Professional background and qualifications
  • Industry experience and expertise
  • Nationality and location information
  • Educational credentials
  • Professional networks (LinkedIn profiles)
  • Contact information (phone, email)

2.3 Collaboration Data

  • Team member assignments and roles
  • Comments, feedback, and review notes
  • Communication within the platform
  • Activity logs and contribution history
  • Advisor and consultant interactions

2.4 Documents and Files

  • Uploaded supporting documents
  • Created and edited documents
  • Financial spreadsheets
  • Presentations and pitch decks
  • Company registration materials
3. AI-Powered Processing

3.1 How We Use AI

PROJAH leverages advanced AI and machine learning technologies to enhance your business planning experience. Your data is processed by AI systems to:

  • Generate Content: Create business plan sections, executive summaries, and market analyses
  • Analyze Viability: Assess business concepts against industry standards and visa criteria
  • Provide Recommendations: Suggest improvements, identify risks, and highlight opportunities
  • Financial Modeling: Generate projections and perform scenario analyses
  • Market Research: Synthesize market data and competitive intelligence
  • Document Enhancement: Improve clarity, structure, and professionalism

3.2 AI Data Usage

When you use AI features, your input data and business context are sent to our AI service providers. We use enterprise-grade AI services with appropriate data protection agreements. Your data is:

  • Processed in secure, isolated environments
  • Not used to train public AI models (per our enterprise agreements)
  • Encrypted in transit and at rest
  • Subject to the same privacy standards as all PROJAH data

3.3 Human Oversight

While AI generates suggestions and content, you maintain full control. All AI-generated content should be reviewed, verified, and customized by you before use in official submissions or presentations.

4. Why We Process Your Data

Your data is processed for the following specific purposes:

Business Plan Development

Creating, storing, editing, and exporting comprehensive business plans and supporting materials

Financial Modeling

Building and analyzing financial projections, revenue models, and cost structures

Validation and Analysis

Assessing business viability, identifying risks, and providing strategic recommendations

Collaboration

Enabling teamwork, feedback, and advisor/consultant interactions

5. Legal Basis for Processing

Under UK GDPR, we process your data based on multiple legal grounds:

5.1 Consent (Article 6(1)(a))

Your explicit consent for data processing activities, particularly for AI-powered features and advanced analytics. You can withdraw consent at any time.

5.2 Contract Performance (Article 6(1)(b))

Processing necessary to provide the services you've subscribed to, including business planning tools, document generation, and platform features.

5.3 Legitimate Interests (Article 6(1)(f))

Processing for our legitimate business interests, such as platform improvement, security, and fraud prevention, balanced against your rights and interests.

6. Who Has Access to Your Data

6.1 Within PROJAH

  • Platform administrators (for support and technical purposes only)
  • Authorized support staff (when you request assistance)

6.2 Your Authorized Users

  • Team members you invite to your business plans
  • Advisors and consultants you engage through the platform
  • Collaborators with permissions you grant

6.3 Service Providers

  • AI and machine learning providers (under strict data protection agreements)
  • Cloud infrastructure providers (for secure data storage)
  • Analytics services (anonymized data only)

Important: We never sell your data to third parties. All service providers are bound by confidentiality agreements and GDPR-compliant data processing terms.

7. Your Rights and Controls

You have full control over your data and can exercise the following rights at any time:

Access Your Data

Request a copy of all data we hold about you

Correct Your Data

Update or correct any inaccurate information

Delete Your Data

Request complete deletion of your information (right to erasure)

Restrict Processing

Limit how we use your data while maintaining your account

Export Your Data

Download all your data in a portable format

Withdraw Consent

Remove your consent for data processing at any time

Object to Processing

Object to processing based on legitimate interests

8. How to Withdraw Consent

You can withdraw your data processing consent at any time through your account settings or by contacting us at service@projah.com.

Important Note:

Withdrawing consent for essential data processing may prevent us from providing certain services. You will retain access to export your data for 30 days before account closure. Core business planning features require data processing to function.

To modify your consent preferences:

  1. Go to Settings → Privacy & Data
  2. Review your current consent status
  3. Update your preferences or withdraw consent
  4. Confirm your changes
9. How We Protect Your Data

We implement comprehensive security measures:

  • End-to-end encryption for data in transit (TLS 1.3)
  • Encryption at rest for stored data (AES-256)
  • Multi-factor authentication support
  • Regular security audits and penetration testing
  • Role-based access controls
  • Automated backup and disaster recovery
  • 24/7 security monitoring and incident response
10. How Long We Keep Your Data

We retain your data based on the following schedule:

  • Active Accounts: Data retained while your subscription is active
  • After Cancellation: 30 days to export your data
  • Deletion: Permanent deletion after 30-day grace period
  • Backups: Removed from backups within 90 days
  • Legal Requirements: Retained longer only if required by law
11. Questions and Concerns

If you have questions about data processing or wish to exercise your rights:

Data Protection Contact:

Email: service@projah.com

Data Protection Officer: service@projah.com

Support: service@projah.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data rights have been violated.

© 2026 PROJAH Ltd. All rights reserved.