Last updated: March 2026
TheBAPortal ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have in relation to it. By using the platform you agree to the collection and use of information as described here.
When you create an account, we collect your name and email address. When you use the platform, we collect your challenge submissions, scores, and activity data so we can show you your progress. When you subscribe to Pro, payment is processed by Stripe — we do not store your card details.
We use your data to provide the platform: personalising your experience, generating your scores and feedback, tracking your progress, and sending you transactional emails (account confirmation, receipts). We do not use your data to train third-party AI models without your consent. We do not sell your data.
Your data is stored in Supabase (hosted on AWS infrastructure in the United States). We use industry-standard encryption in transit (TLS) and at rest. Access to production data is restricted to authorised team members only.
We use strictly necessary cookies to keep you signed in (session cookies via Supabase Auth). We do not use advertising cookies or third-party tracking pixels. You can clear cookies at any time via your browser settings, which will sign you out.
We use Supabase for database and authentication, Stripe for payment processing, and Anthropic's Claude API to power AI stakeholder interviews and evaluation. Each provider has their own privacy policy. We do not share your personally identifiable information with any other third parties.
You can request a copy of your data, ask us to correct inaccurate information, or request deletion of your account and associated data at any time. To exercise any of these rights, email us at the address below. We will respond within 30 days.
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, transaction records).
TheBAPortal is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this policy from time to time. We will notify you of material changes via email or a notice on the platform at least 14 days before the change takes effect.
For any privacy-related questions or requests, email us at privacy@thebaportal.com. We aim to respond within 2 business days.