Privacy

Scenario Development is a guided strategic-foresight tool operated by [Legal entity name]. This page explains what the service collects, why, who else sees it, and how to have it removed. It describes what the software actually does rather than reserving every possible right.

What is collected

• Your account. An email address, and your name and profile picture if you sign in with Google. Passwords are never handled — sign-in is by Google or by a one-time email link.
• What you write during a session. Your challenge question, drivers of change, ratings, scenario names, investigation notes and stories.
• Text from documents you upload. The file is read once, its text is kept, and the original file is then deleted. We do not retain your documents.
• A record of activity. Timestamps of actions such as completing an activity or exporting a Story Pack, used to show progress and diagnose faults.

There is no advertising, no tracking across other websites, and no analytics profiling.

Who else sees it

Two processors, and nobody else:

• Supabase hosts the database, file storage and authentication.
• Google (Gemini) receives the content of your session — including text extracted from documents you upload — when you ask the facilitator to generate something. This only happens when you ask; nothing is sent in the background.

Your material is never sold, never used to advertise to you, and never shared with other customers. If you would rather a document was not sent to a model, do not upload it.

Google sign-in

Signing in with Google gives the service your email address, name and profile picture. It requests no other scope: no access to your Gmail, Drive, Calendar, contacts or any other Google service. Access can be revoked at any time from your Google account permissions.

Where it is kept

Sessions and extracted text are stored in Supabase. Access is enforced at the database level, so one customer cannot read another's sessions or files. Uploaded files are deleted as soon as their text has been read, and are never sent to any scanning or analysis service. Exported Story Packs are held in private storage and reached only through short-lived links.

How long it is kept

Sessions are kept while your account exists, so you can return to them. You can delete an uploaded document at any time from within a session, which removes both the file and its extracted text.

To delete your account and everything in it, write to [privacy contact email]. Deleting an account removes its sessions, documents and exports. Records of activity may be retained in anonymised form.

Cookies

One cookie, which keeps you signed in. There are no advertising or tracking cookies, so there is no consent banner to dismiss.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, by writing to [privacy contact email]. If you are unhappy with the response you may complain to your local data protection authority.

Changes

If this page changes in a way that materially affects you, you will be told before the change takes effect. The date above shows when it was last revised.