Privacy Policy

1. Who we are

The Assay is a product of Digital Venture Studio Pty Ltd (ABN available on request), an Australian company. We provide structured product assessment services for founders and product teams. When this policy refers to "The Assay", "we", "us", or "our", it means Digital Venture Studio Pty Ltd.

Contact: rickmusial@gmail.com

2. What information we collect

We collect the minimum information necessary to deliver your Assay report.

3. How we use your information

We use your information only to:

• →Authenticate your account and deliver your report
• →Process your payment via Stripe
• →Generate your six-dimension Assay report using the Claude AI model (Anthropic)
• →Respond to support requests you initiate
• →Improve the Assay methodology (using aggregated, anonymised insights only — never your identifiable submission data)

We do not sell your data. We do not share your submission data with third parties except as described in Section 4. We do not use your data for advertising.

4. Third-party processors

We use the following sub-processors to operate the service:

Your product submission data is transmitted to Anthropic's Claude API for analysis as part of report generation. Anthropic's API usage policies govern how that data is handled on their end. We recommend reviewing Anthropic's privacy policy if you have specific concerns about AI data handling.

5. Data retention

Your Assay report and submission data are retained for 12 months from the date of your assessment, so you can access your report during that period. After 12 months, submission data is deleted. Your account (email address) is retained for as long as your account is active.

You may request deletion of your account and all associated data at any time by emailing rickmusial@gmail.com. We will action deletion requests within 14 days.

6. Your rights

Depending on your location, you may have the right to:

• →Access the personal data we hold about you
• →Request correction of inaccurate data
• →Request deletion of your data (right to erasure)
• →Object to or restrict certain processing
• →Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at rickmusial@gmail.com. We will respond within 30 days.

7. Cookies

We use only essential cookies required to operate the service — specifically, session cookies for authentication. We do not use advertising cookies or cross-site tracking cookies.

8. Security

We implement industry-standard security measures including encrypted data transmission (TLS), row-level security on our database (Supabase RLS), and secure authentication (OAuth 2.0 / OTP). No method of transmission over the internet is 100% secure. We will notify you promptly in the event of a data breach that affects your personal information.

9. Jurisdiction

This policy is governed by the laws of the Australian Capital Territory, Australia. We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles. If you are located in the European Economic Area, the UK, or California, additional rights may apply to you under the GDPR, UK GDPR, or CCPA respectively.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of The Assay after a policy update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact us at: rickmusial@gmail.com