Privacy Policy

Resultory is a first-customer intelligence platform operated by EdenTouch CoLab Ltd, a company registered in England and Wales (Company No. 16472666), with its registered office at [address to be confirmed]. EdenTouch CoLab Ltd is registered with the Information Commissioner's Office (ICO) under registration number ZC047648.

In this Privacy Policy, "Resultory", "we", "us", and "our" refer to EdenTouch CoLab Ltd. "You" refers to you as a user of the Resultory platform.

For any privacy questions or requests, contact us at support@edentouchcolab.com.

We collect information in three categories:

2.1 Information you provide directly:

• Your name and email address (when you create an account)
• Venture and product data you enter, including product descriptions, pricing, geography, and market assumptions
• Customer hypotheses, segment definitions, and evidence you record
• Experiment plans, outcomes, and learning notes
• Any notes, labels, or interpretations you add to your workspace

2.2 Information collected through authentication:

• When you sign in with Google, we receive your Google account email address and basic profile information (name, profile picture URL if available). See Section 3 for full details.
• When you sign in with Microsoft, we receive your Microsoft account email address and basic profile information (name). See Section 4 for full details.
• We do NOT receive your Google or Microsoft password through either method. Authentication is handled via OAuth 2.0, and we never see or store your provider password.

2.3 Information collected automatically:

• Device and browser information (browser type, operating system)
• Usage data (pages visited, features used, time spent, clicks)
• IP address
• Cookies and similar technologies (see Section 9)

Resultory offers Google Sign-In as an optional authentication method via Google OAuth 2.0.

3.1 What we receive from Google:

When you choose to sign in with Google, Google shares the following with us:

• Your Google account email address
• Your name (as it appears on your Google profile)
• A unique identifier that allows us to confirm you are the same person on future sign-ins

3.2 What we do NOT receive from Google:

We do NOT receive, access, or store:

• Your Google password
• Your Gmail messages or email content
• Your Google Contacts
• Your Google Drive files or documents
• Your Google Calendar
• Your Google Photos
• Your Google Search history
• Your YouTube data
• Any other Google service data beyond the basic profile information listed above

3.3 How we use Google information:

• To create and authenticate your Resultory account
• To display your name and email within the platform
• To send service-related communications to your email address

3.4 Google's role:

Google's use of information received from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties unless strictly necessary to provide the Resultory service and comply with applicable law.

3.5 Revoking Google access:

You can revoke Resultory's access to your Google account at any time by visiting your Google Account settings (myaccount.google.com → Security → Third-party apps with account access). Revoking access prevents future sign-ins with Google but does not automatically delete your Resultory account or data already stored. To delete your Resultory account and data, see Section 8.

Resultory offers Microsoft Sign-In as an optional authentication method via Microsoft Identity Platform (OAuth 2.0).

4.1 What we receive from Microsoft:

When you choose to sign in with Microsoft, Microsoft shares the following with us:

• Your Microsoft account email address
• Your name (as it appears on your Microsoft profile)
• A unique identifier that allows us to confirm you are the same person on future sign-ins

4.2 What we do NOT receive from Microsoft:

We do NOT receive, access, or store:

• Your Microsoft password
• Your Outlook or Hotmail email content
• Your Microsoft Contacts
• Your OneDrive files or documents
• Your SharePoint data
• Your Microsoft Calendar
• Your Teams messages
• Any other Microsoft 365 service data beyond the basic profile information listed above

4.3 How we use Microsoft information:

• To create and authenticate your Resultory account
• To display your name and email within the platform
• To send service-related communications to your email address

4.4 Revoking Microsoft access:

You can revoke Resultory's access to your Microsoft account at any time by visiting your Microsoft Account settings (account.microsoft.com → Privacy → Apps and services). Revoking access prevents future sign-ins with Microsoft but does not automatically delete your Resultory account or data already stored. To delete your Resultory account and data, see Section 8.

We use your information to:

• Create, manage, and authenticate your account
• Provide the Resultory platform, including generating customer hypotheses, segment comparisons, evidence tracking, commitment analysis, and learning reports
• Process venture and product data you enter to produce AI-generated recommendations and reports
• Send service-related emails (account verification, security alerts, product updates)
• Analyse platform usage to improve features and user experience
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

Resultory uses AI to process venture data, assumptions, and evidence you provide. Specifically:

• Your product descriptions and market assumptions are processed to generate customer hypotheses
• Your evidence and experiment data are processed to generate segment comparisons, commitment analysis, and learning reports
• AI-generated outputs include hypotheses, recommendations, segment scores, and decision suggestions

Important:

• AI-generated outputs are recommendations, not conclusions. They require human review and founder judgement before acting.
• All AI-generated recommendations include uncertainty and evidence limitations.
• The founder (you) retains responsibility for all business decisions made based on platform recommendations.

We do not use your personal data to train external AI models. Data you enter is processed to provide the service to you.

7.1 Service providers:

We share data with third-party service providers who help us operate Resultory:

• Cloud hosting provider
• Email delivery provider
• Analytics provider

These providers process data under appropriate agreements and only as necessary to provide their services to us.

7.2 Legal requirements:

We may disclose your information if required by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

7.3 What we do NOT do:

• We do NOT sell your personal data
• We do NOT sell or share data received from Google or Microsoft authentication
• We do NOT share your venture data with other users unless you explicitly choose to share a report or link

8.1 Account data:

We retain your account information and venture data for as long as your account is active. If you delete your account, we will delete your personal data and venture data within a reasonable period, subject to legal retention requirements.

8.2 Requesting deletion:

You can request deletion of your account and all associated data at any time by contacting support@edentouchcolab.com. We will process your request within 30 days.

8.3 Revoking authentication ≠ deleting account:

Revoking Google or Microsoft access (Sections 3.5 and 4.4) prevents future sign-ins but does not delete your Resultory data. Account deletion must be requested separately.

We use cookies and similar technologies for:

• Essential cookies: Authentication, session management, security. These are required for the platform to function.
• Analytics cookies: Understanding how visitors use the site so we can improve it. These are optional.
• Preference cookies: Remembering your settings (e.g., theme, plan selection).

You can manage or disable cookies through your browser settings. Disabling essential cookies may prevent you from using the platform.

We take reasonable measures to protect your data, including access controls, regular reviews of our data handling practices, and secure authentication via OAuth 2.0 for Google and Microsoft sign-in.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

You have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing that relies on consent (including cookie consent) at any time

To exercise any of these rights, contact support@edentouchcolab.com.

If you have a complaint about how we handle your data, you can contact the Information Commissioner's Office (ico.org.uk).

Your data is primarily processed and stored in the United Kingdom. If we transfer data outside the UK, we do so using appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision by the UK government.

Resultory is designed for founders and business professionals. We do not knowingly collect data from anyone under 16. If you believe a minor has provided us with data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform. The "Last updated" date will reflect the most recent revision.

For any questions, requests, or concerns about this Privacy Policy:

• Email: support@edentouchcolab.com
• Company: EdenTouch CoLab Ltd (Co No 16472666, ICO ZC047648)

Last updated: August 2026