This policy explains what information Persona Pal collects, how we use it, and the choices you have. We’re in beta and keep this honest — it describes our practices today and where they’re heading.

Who we are

Persona Pal (“we”, “us”) provides a workspace for creating and managing personas. This policy covers the marketing site (https://personapal.io) and the product application.

Information we collect

Account information: name, email, organisation, and authentication identifiers (e.g. via SSO).
Content you create: personas, templates, notes, evidence and related data you add to your organisation.
Beta sign-up: the email address and optional role you submit to join the beta.
Usage data: privacy-respecting analytics about how the product and site are used, to improve them.

How we use information

To provide and operate the service.
To authenticate you and keep your organisation’s data secure and isolated.
To communicate with you about your account, beta access and material changes.
To improve the product, using aggregated, privacy-respecting analytics.

What we never do

We do not train any AI model on your content, and we do not sell your data or share your organisation’s content with third parties for their own purposes. Your personas and customer knowledge are yours. See our Data Security page for how we enforce this.

Data isolation

Each organisation’s content is strictly isolated and accessible only to that organisation’s members — even we cannot access the contents of an org account.

Sub-processors

We use a small number of infrastructure and email providers to run the service (e.g. hosting and transactional email). Each is bound by appropriate data-protection terms. A current list is available on request and will be published as we move out of beta.

Cookies & analytics

We use essential cookies to keep you signed in and a privacy-respecting analytics approach to understand usage. We don’t use invasive third-party advertising trackers.

Data retention & deletion

We retain your data for as long as your account is active. You can request export or deletion of your data at any time; on account closure we delete or anonymise your data within a reasonable period, subject to legal obligations.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. To exercise any of these, contact us.

Data Processing Addendum

A DPA is available for Enterprise customers. Contact us to put one in place.

Changes to this policy

We’ll update this page as the product matures and will note the “last updated” date above. Material changes will be communicated to account holders.

Contact

Questions about privacy? Email hello@personapal.io.

Privacy Policy