Privacy Policy

PROJAH Ltd ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business planning platform.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. PROJAH Ltd is the data controller responsible for your personal data.

2.1 Information You Provide

• Account Information: Name, email address, phone number, organization name
• Profile Data: Professional bio, LinkedIn profile, qualifications, nationality, location
• Business Information: Business plans, financial projections, market research, ideas
• Payment Information: Billing details processed securely through Stripe (we don't store full card numbers)
• Communications: Messages, support requests, feedback you send us
• Documents: Files you upload, create, or generate on the platform

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, interactions
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, performance data
• Cookies and Tracking: Information collected through cookies and similar technologies

2.3 Information from Third Parties

• Authentication providers (for login services)
• Payment processors (Stripe)
• AI service providers (for content generation features)
• Companies House API (for company information)

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide business planning tools and features
• Generate AI-powered content and analysis
• Process payments and manage subscriptions
• Enable collaboration with team members and advisors
• Facilitate booking consultations and advisory services

3.2 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Notify you of changes to our services or policies

3.3 Improvement and Analytics

• Analyze usage patterns to improve our platform
• Develop new features and services
• Conduct research and analytics
• Monitor and improve platform performance

3.4 Legal and Security

• Comply with legal obligations
• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Protect our rights and property

Under UK GDPR, we process your personal data based on:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legitimate Interests: For business operations, security, and improvements
• Legal Obligation: To comply with applicable laws and regulations

We may share your information with:

5.1 Service Providers

• Cloud hosting providers (for data storage)
• AI and machine learning service providers
• Payment processors (Stripe)
• Email and communication services
• Analytics and monitoring tools

5.2 Within Your Organization

• Team members you invite to collaborate
• Advisors and consultants you authorize
• Other users with permissions you grant

5.3 Legal Requirements

• When required by law or legal process
• To enforce our rights or protect against legal liability
• To protect the safety and security of our users

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Employee training on data protection
• Incident response and breach notification procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements
• For legitimate business purposes

When you close your account, we will delete or anonymize your data within 30 days, except where we are legally required to retain it longer. You can export your data before deletion.

Under UK GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Complain: Lodge a complaint with the ICO (Information Commissioner's Office)

To exercise these rights, contact us at service@projah.com. We will respond within one month.

We use cookies and similar technologies to:

• Keep you logged in and remember your preferences
• Understand how you use our platform
• Improve performance and user experience
• Provide personalized content

Types of Cookies:

• Essential Cookies: Required for the platform to function
• Analytics Cookies: Help us understand usage patterns
• Functional Cookies: Enable enhanced functionality
• Marketing Cookies: Used for targeted advertising (with consent)

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

Our platform integrates with third-party services:

• Stripe: Payment processing (privacy policy: stripe.com/privacy)
• AI Providers: Content generation and analysis
• Companies House: UK company data lookup
• Cloud Providers: Hosting and infrastructure

These services have their own privacy policies. We recommend reviewing them to understand how they handle your data.

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the UK authorities
• Adequacy decisions by the UK government
• Other legally recognized transfer mechanisms

PROJAH is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately, and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of PROJAH after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data: