Privacy Policy

The Human Delta is an early-stage initiative based in Sweden. We are not yet registered as a legal entity. Until we are, the founder operates the ecosystem and acts as the data controller for the personal data described here.

For any privacy question, data request, or concern, contact us at privacy@thehumandelta.com.

We try to collect as little as possible. In practice, that means:

• Account data (START™, Pivot Report™, future STRATOS™): email address, name, password hash, and the answers, results, and preferences you create inside the product.
• Newsletter: email address and the fact that you subscribed.
• Contact / forms: whatever you choose to send us (name, email, message).
• Payments (where applicable): handled by Stripe. We receive a transaction reference and basic billing details — we never see or store your full card number.
• Technical data: standard server logs (IP address, browser, page visited, timestamp) used for security and reliability.
• Product services: depending on the Human Delta product or service you use, we may collect information necessary to provide that service, including assessment responses, uploaded content, generated reports, transcripts, reflective notes or other information that you choose to provide. Product-specific Privacy Policies describe these categories in greater detail where appropriate.

• To provide the product — contract (Art. 6(1)(b)).
• To send the newsletter — your consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link.
• To keep the services secure and working — legitimate interest (Art. 6(1)(f)).
• To provide the products, reports, assessments and other services that you request through the Human Delta ecosystem — contract (Art. 6(1)(b)).
• To comply with tax, accounting and legal duties — legal obligation (Art. 6(1)(c)).

We work with carefully selected third-party providers that help us operate the Human Delta ecosystem. Depending on the services you use, these providers may include hosting providers, payment processors, artificial intelligence providers, domain registrars, email providers and analytics services. They process data on our behalf, under contract, and only for the purposes we set. Current providers include:

• Lovable — hosting and backend infrastructure for our websites and products.
• Stripe — payment processing where paid features apply.
• STRATO — domain registration.

If we add another provider (for example a dedicated newsletter or analytics tool), we will update this list before relying on them.

Some of our providers may process data outside the EU/EEA. When that happens, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision to keep your data protected to EU standards.

• Account data: while your account is active, then deleted on request or after a reasonable inactivity period.
• Newsletter: until you unsubscribe.
• Contact messages: up to 24 months, then deleted.
• Payment records: as required by Swedish tax and accounting law (typically 7 years).
• Server logs: short rolling window for security and debugging.

Product-specific Privacy Policies may describe different retention periods where required by the nature of that service.

Under GDPR you can:

• Ask for a copy of the data we hold about you.
• Correct anything that is wrong.
• Ask us to delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent (e.g. for the newsletter) at any time.

Email privacy@thehumandelta.com and we will respond within 30 days. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local EU supervisory authority.

We use encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No system is perfect — we will notify affected users without undue delay if a personal data breach is likely to put their rights at risk.

We design our services to minimise unnecessary collection and retention of personal information wherever reasonably practical.

Individual Human Delta products may publish their own Privacy Policies. Those policies explain the information collected by that product and how it is processed. Where there is any inconsistency, the Privacy Policy published for the individual product applies to that product.

The Human Delta is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has shared data with us, email us and we will delete it.

If we make material changes we will update the date at the top and, where appropriate, notify subscribers by email.