Privacy Notice

This Privacy Notice describes how Progress Partners Consulting LLC (DBA: Gamechangers Consulting LLC) (“we,” “us,” or “our”) collects, uses, stores, and protects personal data through the StrategyHub™ platform (the “Service”).

Who is responsible for your data

Progress Partners Consulting LLC (DBA: Gamechangers Consulting LLC) is the data controller for personal data collected through the Service. If you have questions or want to exercise your rights, contact us at privacy@strategyhub.io.

What personal data we collect

We collect the following categories of personal data:

• Account information: name, email address, and authentication credentials when you create an account.
• Profile and usage data: information about how you use the Service, including workspaces, plans, goals, KPIs, initiatives, comments, and settings.
• Communications: support requests, feedback, and emails you send us.
• Technical data: IP address, browser type, device identifiers, and cookies or similar technologies.
• Payment data: payment transactions are processed by Paddle, our Merchant of Record. We do not store full payment card details on our systems.

How we use your data

We use personal data for the following purposes and legal bases:

• To provide the Service — performance of our contract with you.
• To authenticate users and secure accounts — performance of contract and legitimate interests in security.
• To communicate with you about your account, updates, and support — legitimate interests and, where required, consent.
• To improve the Service and develop new features — legitimate interests.
• To comply with legal obligations and protect our rights — legal obligation and legitimate interests.

Who we share data with

We share personal data only with trusted recipients as needed to operate the Service:

• Service providers: hosting, database, authentication, email delivery, analytics, and support tooling providers.
• AI service providers: when you use an AI feature, as described under “AI features and model providers” below.
• Paddle: our Merchant of Record, which processes payments, subscription management, tax compliance, and invoicing.
• Professional advisers: legal, accounting, and compliance advisers when necessary.
• Authorities: when required by law or to protect our rights.

AI features and model providers

StrategyHub does not use Customer Data to train foundation models.

When you use a workspace AI feature — for example plan or document import, an executive summary, status-report drafting, or the strategy assistant — we send only the content needed for the request you start. Those requests are routed through the Lovable AI Gateway on Lovable’s Business plan to Google Gemini. Failover stays on Gemini. Customer workspace content is not sent to OpenAI on that path.

Lovable’s Data Processing Agreement, which applies to Lovable Business, excludes Customer Content from model training by default. Lovable states that data end users submit to applications built on Lovable is not used for model training on any Lovable plan. When content is sent to a model provider to deliver the service, Lovable states that its provider agreements limit that use to delivering the service, and that those providers may not train AI models on the content. Further published references are Lovable’s Privacy Policy and Trust Center.

The Lovable AI Gateway entrypoint is hosted in the European Union. Inference runs at provider endpoints in the United States. That path is not limited to the European Union end to end, and content sent for inference reaches the United States. We do not state a retention period for gateway request or response payloads, and we do not claim zero-data-retention for that traffic.

A separate path rewrites StrategyHub’s own public marketing copy with OpenAI, using StrategyHub’s own API key and with storage disabled on each request. That path does not receive customer workspace content.

More detail is in the AI Features Terms, the Security page, and the Subprocessors list.

Data retention

We retain personal data for as long as necessary to provide the Service, fulfill the purposes described in this notice, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, email privacy@strategyhub.io. We respond within one month where required by law.

Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

Cookies

We use essential cookies to operate the Service and optional analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

International transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. We use appropriate safeguards, such as standard contractual clauses, for transfers outside the UK/EEA where required.

Changes to this notice

We may update this Privacy Notice from time to time. We will post the revised notice with a new effective date. Continued use of the Service after changes constitutes acceptance.

How to contact us

Privacy requests may be emailed to privacy@strategyhub.io or mailed to: