Privacy Policy

1. Introduction

Vallenstone LLC ("we," "our," or "us") operates the website beyondpmf.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and participate in our Product-Company Fit research study.

We are committed to protecting the privacy and confidentiality of all research participants, particularly executives who share sensitive organizational insights.

2. Information We Collect

2.1 Personal Information

When you participate in our research study, we may collect:

• Name and professional title
• Email address
• Company name (optional)
• Phone number (optional)
• Industry and professional experience
• Organizational insights and survey responses regarding Product-Company Fit methodologies

2.2 Personal Information

We may collect certain information automatically when you visit our Service:

• IP address and general location data
• Browser type and version
• Pages visited and time spent on our Service
• Referring website information

2.3 Third-Party Services

We use the following third-party services that may collect information:

• Webflow: Website hosting and content delivery
• Jotform: Survey data collection and management
• Mailchimp: Email marketing and newsletter distribution
• n8n: Workflow automation and data processing (self-hosted on Hetzner servers in Germany)
• Google Sheets: Data export and simplified survey hosting
• Hetzner Online: Server hosting for automation infrastructure (Germany-based)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Research Study

• Conduct Product-Company Fit research analysis
• Generate individual PCF assessments and benchmark reports
• Create aggregated industry insights and best practices
• Develop academic publications and thought leadership content

3.2 Communication

• Send personalized research results and executive summaries
• Deliver newsletter content and product strategy insights (with your explicit consent)
• Provide consulting information and offers related to product strategy, implementation, and coaching (if you opt-in for marketing communications)
• Contact you by email, messenger, or telephone for business development purposes (if you provide consent for marketing communications)
• Respond to inquiries and support requests

3.3 Service Improvement

• Enhance our research methodologies
• Improve website functionality and user experience
• Develop new research initiatives and frameworks

3.4 AI-Assisted Analysis and Automation

We may use artificial intelligence systems (including but not limited to Claude, ChatGPT, and other AI tools) to:

• Analyze survey responses and identify patterns
• Generate insights and recommendations
• Assist in report creation and content development
• Improve research methodologies and frameworks
• Automate response processing and data analysis workflows

We use self-hosted automation tools (n8n) on German servers (Hetzner Online) to ensure data sovereignty and enhanced security for European participants.

Important: AI systems are used as analytical tools only. All personal and company-specific data remains confidential, and AI processing does not compromise the anonymization commitments outlined in this policy.

4. Data Sharing and Disclosure

4.1 Research Publications

We may publish aggregated, anonymized research findings in:

• Academic journals (e.g., Harvard Business Review, MIT Sloan Management Review)
• Industry reports and whitepapers
• Conference presentations and thought leadership content

Important: Individual responses and company-specific data will never be disclosed in publications without explicit written consent.

4.2 Academic Collaboration

We may share anonymized, aggregated data with academic partners for research purposes, ensuring no individual or company can be identified.

4.3 Service Providers

We may share information with trusted third-party service providers who assist in:

• Data processing and analysis
• Email delivery and marketing automation
• Website hosting and technical support

All service providers are contractually obligated to maintain data confidentiality and security.

4.4 AI Processing Partners

We may share anonymized, aggregated data with AI service providers for analysis purposes. These providers are contractually bound to maintain data confidentiality and are prohibited from using your data for their own purposes.

4.5 Data Processing Infrastructure

• Self-hosted automation (n8n) operates on German servers (Hetzner Online) to ensure data sovereignty
• AI processing systems (Claude, ChatGPT, and other AI tools) for analysis and insight generation
• Google Sheets may be used for simplified survey data export and hosting (future implementation)
• All data processing infrastructure maintains enterprise-grade security standards

4.6 Legal Requirements

We may disclose information if required by law, court order, or governmental regulation.

5. Data Security

We implement robust security measures to protect your information:

• Encrypted data transmission (SSL/TLS)
• Secure cloud storage with enterprise-grade providers
• Access controls and authentication requirements
• Regular security assessments and updates

6. Data Retention

6.1 Study Duration

Your personal data will be retained throughout the research study period (expected to conclude March 2026).

6.2 Post-Study Retention

Following study completion and results publication:

• Personal identifiers will be retained for 6 months to fulfill commitments to participants
• After 6 months, all personal data will be anonymized or deleted
• Anonymized research data may be retained indefinitely for academic purposes

6.3 Newsletter Subscribers

If you subscribe to our newsletter, your email address will be retained until you unsubscribe or request deletion.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to:

• Request access to your personal information
• Correct inaccurate or incomplete data
• Request a copy of your survey responses

7.2 Withdrawal and Deletion

You may:

• Withdraw from the research study at any time
• Request deletion of your personal data (subject to legal obligations)
• Unsubscribe from newsletters and marketing communications

7.3 Marketing Communications

You have granular control over communications:

• Research Results Only: Receive only your study results without additional marketing
• Newsletter and Marketing: Receive study results plus ongoing product strategy insights, consulting information, and business offers
• Opt-out Rights: You may revoke marketing consent at any time without affecting your research participation or results delivery

7.4 Data Portability

You may request a copy of your data in a structured, machine-readable format.

8. International Data Transfers

While Vallenstone LLC is incorporated in the United States, our primary operations are EU-based. Your information may be transferred to and processed in the United States, European Union, and Germany (for our automation infrastructure hosted on Hetzner servers). We ensure appropriate safeguards are in place for international data transfers, particularly for participants in the European Union.

Data Processing Locations:

• Primary operations: European Union
• Legal entity: United States (Vallenstone LLC)
• Automation infrastructure: Germany (Hetzner Online servers)
• Survey tools: Various locations as specified by service providers

EU Data Protection: As EU-based operations, we maintain strict compliance with GDPR requirements and European data protection standards.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to study participants
• Updating the "Last Updated" date at the top of this policy

11. Contact Information

For any privacy-related questions, requests, or concerns, please contact us:

Vallenstone LLC
‍16192 Coastal Highway
Lewes, DE 19958
United States

Email: support@beyondpmf.com
‍Website: beyondpmf.com
Data Protection Inquiries: Please include "Privacy Request" in your email subject line.

12. Compliance Information

This Privacy Policy is designed to comply with applicable data protection laws, including:

• General Data Protection Regulation (GDPR) for EU participants
• California Consumer Privacy Act (CCPA) for California residents
• Other applicable state and federal privacy regulations

This Privacy Policy demonstrates our commitment to protecting executive privacy while enabling valuable research that benefits the broader business community. Your participation helps advance understanding of Product-Company Fit methodologies and organizational scaling best practices.