Privacy Notice

1. Referral pilot scope

This notice covers the DataToAsset referral website, related email inquiries and, when available, a separate optional request for future-opportunity emails. This version has no company data questionnaire, document upload, internal AI assessment or automatic CRM enrollment. An external application is a separate service governed by its own privacy notice and terms.

2. When you follow a referral link

Check eligibility first opens a short explanation of the external application. Only after you choose to continue does the external application open. Our referral identifier accompanies that link so the receiving service can attribute a recommendation. We do not append your name, email, company information or incoming page parameters to that link. Nothing is submitted to the receiving service automatically or authorizes data licensing. Review its identity, privacy notice and terms before entering information.

The receiving service necessarily receives connection information when your browser visits it and may use its own cookies or tracking. We do not receive a copy of your application automatically. Any referral status shared with us is used only to support and account for the introduction.

3. Website and email information

We do not use email-open tracking pixels or advertising cookies. Optional cross-site analytics are described separately below and load only after consent. Business outreach messages may contain a unique link on datatoasset.com. When this measurement is enabled, we record the date, a pseudonymous campaign/contact reference, whether an entry link or an eligibility navigation was requested, and whether a browser reported opening the handoff panel or choosing to continue to the application. These references can be matched to our private outreach contact records, so this is not anonymous measurement. A forwarded link may be used by someone other than its original recipient. These request and browser-reported signals do not prove a human read the page, completed an application, or was accepted.

Our application measurement records do not contain your email address, IP address, full browser identifier or browsing history. We do not use cookies or browser storage for this attribution. You can visit https://datatoasset.com directly without the individual link; supported Do Not Track and Global Privacy Control request signals also disable application-level event recording. Netlify hosts the site and measurement storage and may separately process IP addresses, request URLs and browser information for delivery, security and operational logs.

If you email us, we receive the contact details and message you choose to send. We use them to respond, support the introduction and handle privacy requests, not as permission for unrelated marketing. Mailpool provides our mailbox, and Brevo supports handling email conversations. These providers process information needed to operate those services; processing may occur outside your country. Do not send documents, credentials, health information or confidential source records.

4. Optional future-opportunity emails

If this separate option is available and you actively select it, we request your company name and work email. A company domain may be suggested from the email address or corrected by you; it is only a matching hint, not proof of employment, authority, eligibility or a completed partner application. We keep the chosen purpose and copy version, a stable private contact reference and relevant timestamps. We do not share these details with AI data partners or add them to advertising audiences. You choose whether to apply to any later opportunity yourself.

An explicit, checked request can activate future-opportunity emails without a separate mailbox-confirmation step. A website receipt means only that the request reached us; it does not prove that a private record was saved or that any email was sent. No welcome email or campaign is sent by this signup. Only active, non-suppressed contacts may be considered for later DataToAsset opportunity emails. An email address or matching company name does not verify a person, company or authority. Future opportunity emails must include an unsubscribe action; you can also ask us to stop contact. Unsubscribing removes company name, domain and email from this subscription record and keeps a minimal keyed suppression reference and date to prevent accidental re-enrollment.

The initial operational retention plan is up to 365 days from an active request without renewed permission; historical unconfirmed requests retain their 30-day limit. These are operational limits, not legal clearance. Subscription capture is gated on private storage, sender configuration and verified cleanup operation. Suppression references are retained while needed to prevent old imports or links from reactivating contact; changing the private HMAC key requires a controlled suppression migration or continued use of the prior key.

5. Optional analytics

Optional PostHog analytics stays off until you choose Allow analytics. When enabled, we record sanitized page views, clicks on the main eligibility buttons, a saved opportunity-updates request, and an attempt to continue to the partner application. We use a random identifier held only for the current browser visit. We do not send PostHog your name, email address, company details, form contents, private outreach tokens, cookies, full URLs, IP address or browser user-agent string. Query strings and fragments are removed, and PostHog person profiles, session replay, feature flags and advertising tracking are disabled.

Use Privacy settings to change or withdraw your choice. Withdrawal stops new optional events and clears the visit identifier. Do Not Track and Global Privacy Control keep optional analytics off. Private outreach measurement and hosting logs are separate systems described elsewhere in this notice. An analytics event does not prove that a person completed an application, was accepted or generated referral income.

6. Retention and requests

Our retention policy for pilot email and minimal referral records is up to 12 months after the last meaningful interaction unless earlier deletion can be honored or a legal obligation, payment record or dispute requires longer retention. Measurement links expire within 90 days. A daily cleanup removes the application-level event and token linkage after expiry; this does not describe or change Netlify infrastructure logs or backups, which follow the provider’s own retention practices.

For access, correction, deletion or an objection to further contact, email alex@datatoasset.com with only the minimum information needed to find the record. Do not send identity documents. Applicable rights depend on jurisdiction. This notice describes the pilot’s handling practices; it is not a certification of legal compliance.

7. Independent application and business use

The service is for adult, authorized business representatives. We do not take ownership of company data or grant the receiving service any rights on your behalf. Questions about data you submit there should be directed to that service. Our separate, undeployed advisory features are outside this pilot; these pages do not authorize their activation.