What we collect, and why.

Enquiries

When you use the Start form, the footer form, the Founder Check or a Labs page, we receive what you type: your name, work email, company, website, an optional WhatsApp number, your message and any answers you give. We use it to reply, to judge whether we can help, and to prepare for a call. It is stored in our private Google Sheet and emailed to the team through Resend.

Business Check and tool reports

The Business Check reads public web pages about the business you enter, the way a search crawler does, and obeys each site’s robots.txt. It never opens Instagram or WhatsApp, whose terms prohibit automated reading; it records only the handle and number you give it.

To help interpret what it read, the check sends one request to an AI model (GLM-4.7-Flash) run by Cloudflare Workers AI, repeated once if the answer comes back malformed. The request contains the business name, the market you chose, the titles of the rule-based findings with any handles, email addresses and phone numbers removed, and the text of the public pages we read: each page’s address, title, description, headings and visible text, capped in length. Those pages may include contact details the business itself publishes. The request never contains your name, email or phone number, and never the Instagram handle or WhatsApp number you enter: the check runs before you are asked for an email, and unlocking a report sends nothing to the model.

We use the model’s answer only to add interpreted facts, conflicts and buyer questions to your report, each tied to a page we read. We don’t store or log the request or the raw answer; our logs keep only the time taken and the amount processed. Cloudflare processes the request to return the answer, under its own data-protection terms. If the model is unavailable, the report says so and uses the rule-based checks alone.

When you ask for a full report from the Business Check, the Founder Check or the calculator, we record your email, any name, company or phone number you add, the report, where you came from on the site, and each contact choice you make with its time: report delivery, follow-up from us, phone or WhatsApp contact, and Field Notes are four separate permissions, and only report delivery comes with the request. Asking for a report never adds you to Field Notes or any other list; ticking Field Notes sends a confirmation email first, and nothing more arrives until you confirm. This sits in our private Google Sheet, and Resend sends the report. Opening the report from its email sets one essential cookie, so the site recognises you next time without asking for your email again; choosing “Use a different email” removes it.

Field Notes and other email lists

When you subscribe, we record your email address, the list, where on the site you signed up, the version of the consent wording you saw, and when you asked, confirmed and, if you do, unsubscribed. Nothing is sent beyond the confirmation email until you click its link. Resend holds the sending list; the consent record sits in our Google Sheet.

Every issue has a one-click unsubscribe link, and supporting email apps show an unsubscribe button. Unsubscribing removes you from the list straight away.

Booking a call

Calls are booked through Cal.com, which receives your name, email, chosen time and anything you add to the booking. Cal.com tells our Google Sheet when a booking is made, moved or cancelled, so we can prepare.

Analytics

Google Analytics runs on the live site under Google Consent Mode, with analytics storage denied by default. It sets analytics cookies only if you choose Accept in the banner; until then Google receives cookieless signals without identifiers. Vercel Web Analytics and Speed Insights are cookieless and report in aggregate. We never send your email, name or message to any analytics tool.

Your browser also keeps a small note of how you first arrived (landing page, referring site and campaign tags) in local storage. It stays on your device and travels to us only with a form you submit, so we know which pages bring enquiries.

Who processes your data

• Vercel. Hosts the site and runs its forms. Cookieless Web Analytics and Speed Insights.
• Resend. Sends our emails and holds the Field Notes list.
• Google Workspace (Sheets). Our private record of enquiries, bookings and email consent.
• Google Analytics. Site measurement under Consent Mode.
• Cal.com. Books calls with the team.
• Cloudflare Workers AI. Runs the AI model that helps interpret the public pages a Business Check reads. It receives business and public-page information only, never your contact details.
• Sanity. Stores the site’s public content. It holds no visitor data.

These providers may process data outside Nigeria, including in the United States and the European Union, under their own data-protection terms.

How long we keep it

• Enquiries and booking records: 24 months after our last contact, unless you become a client, in which case for as long as we work together and the law requires after that.
• Email lists: while you are subscribed. After you unsubscribe we keep the consent record (email, list and dates) for 24 months, so we can show what you agreed to and keep honouring your choice.
• Sign-ups never confirmed: deleted within 90 days.
• Reports you ask for from the Business Check, the Founder Check or the calculator, with your contact choices: 24 months after our last contact, the same as enquiries. A Business Check you never ask to receive is not stored by us; only your browser holds it, encrypted, while the page is open.
• Google Analytics event data: 14 months from a visitor’s last activity, the retention setting on our Google Analytics property.

These deletions run automatically every day.

Your choices

You can ask to see, correct or delete what we hold about you, or object to how we use it. Email hello@neustackstudio.com with “Privacy request” in the subject. Our founder handles every request, and we complete it within 30 days. To stop emails, use the unsubscribe link in any of them. To change analytics, clear the ns_ga_consent cookie and choose again.