Privacy Policy

Prevail is operated by [PLACEHOLDER: registered company name], [PLACEHOLDER: company number], registered at [PLACEHOLDER: registered address] (“Prevail”, “we”, “us”). We are the data controller for the personal data described in this policy.

You can reach us about anything in this policy at hello@prevail.so.

When you request early access or apply to the design partner programme, we collect what you type into the form:

• Your name
• Your work email address
• Your company name
• Your company size band
• What you tell us about your current growth projects

If you email us, we keep that correspondence. Our hosting providers also record standard technical logs, such as IP address, browser type and the pages requested, which they retain for a short period for security and reliability.

We do not ask for, and ask that you do not send us, special category data or any customer data belonging to your own users.

• To reply to your request and assess whether early access is a fit — our legitimate interest in responding to people who approach us about the product.
• To run the design partner programme, including scheduling conversations — our legitimate interest in developing the product with the teams who will use it.
• To send you product updates about the launch — your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
• To keep records of enquiries and comply with our legal and accounting obligations — compliance with a legal obligation.

We do not sell your data, and we do not use it to build advertising profiles.

We use Google Analytics to understand how people use this site. Google may set cookies or use similar technologies and process usage data such as page views, device type, and IP address on our behalf. You can opt out with Google's browser add-on or by blocking analytics cookies in your browser. We do not use advertising cookies or build advertising profiles.

We use a small number of service providers who process data on our instructions under a data processing agreement:

• [PLACEHOLDER: hosting provider, e.g. Vercel Inc.] — website and application hosting
• Neon Inc. — the managed Postgres database where form submissions are stored
• Resend (Plus Five Five, Inc.) — sending transactional and update emails
• Google LLC — site analytics (Google Analytics)

We may also disclose data where we are legally required to, or to advisers in connection with a sale or reorganisation of the business.

Some of our providers are based in, or store data in, the United States. Where personal data leaves the UK or European Economic Area, the transfer is covered by the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with any additional safeguards those clauses require. Our database is hosted in [PLACEHOLDER: Neon region, e.g. eu-central-1].

We keep early access enquiries for up to 24 months after our last meaningful contact with you, so that we can pick the conversation back up when the product is ready. If you ask us to delete your data, or withdraw consent to updates, we act on it promptly and keep only a minimal record that you asked to be removed.

Under UK and EU data protection law you have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict or object to how we use it, including objecting to processing based on legitimate interests
• Receive your data in a portable format
• Withdraw consent at any time, without affecting processing carried out before you withdrew it

To exercise any of these, email hello@prevail.so. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority in your country if you are in the EEA.

Data is transmitted over TLS and stored in an access-controlled managed database. Access is limited to the people who need it to run the early access programme. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant regulator as the law requires.

Prevail is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

If we change this policy we will update the date at the top of this page, and tell you directly where the change materially affects how we use data you have already given us.