Legal

Privacy

Effective Date: August 28, 2026. Last updated September 8, 2026. Flynn Operations Group (“we,” “us,” or “our”) operates https://pracenda.com(the “Service”). This page explains, in plain English, what information the Service collects, how long each category is kept, which third parties process it, and how to reach us about access, deletion, or any other privacy question.

What we collect

The Service collects the information needed to run your account, deliver requested assessment results, prepare your requested document, and complete payment:

• Account name and email.The address you use to sign in — the same address the Service sends drafts, order confirmations, and replies to.
• Submitted messages.The name, email, and message body you submit through the contact form on the /contact page. The submission is relayed through our shared inbox and is not retained on the site beyond the request itself — the same disclosure the contact form shows before you submit.
• Assessment responses and lead details. If you request an emailed copy of a Pracenda assessment, we collect your name and email, the answers and calculated scores, and any optional business name, employee-count, industry, or campaign-attribution information you provide. We also record whether you separately chose to receive occasional marketing messages. The basic assessment result is available before you provide contact information.
• Intake and service information. The document type, industry, guided answers, workflow explanations, revision requests, and other details you provide so Pracenda can prepare and deliver your draft.
• Uploaded materials and recordings. Documents, images, audio, and video you choose to upload. For recordings, we may create an audio transcript, sample video frames, and structured process notes such as roles, steps, decisions, exceptions, assumptions, and follow-up questions. You review the extracted information before submitting the intake.
• Billing information. The Stripe Checkout Session ID, payment status, currency, and amount in cents. Stripe handles the card data; the card number never touches our servers.

How long each category is kept

Retention depends on the category. Account, assessment, and contact-form data follow the rules below; payment, policy-acceptance, and tax records follow schedules Stripe or your jurisdiction requires.

• Account profile.Held for the lifetime of the account. When you close your account, deletion begins as described under Deletion below.
• Submitted messages and contact-form submissions. Forwarded to the shared inbox; no on-site retention beyond the request. Once the message lands in the inbox, it is handled like any other email you send us.
• Assessment submissions. Kept so we can deliver the requested result, understand which documentation needs visitors identify, and honor the recorded marketing choice. We retain the submission until you ask us to delete it or it is no longer needed for those purposes. If you later become a customer, relevant details may also be kept with your account or service record. Limited records may remain when needed for legal, fraud-prevention, or dispute purposes.
• Intake answers, uploaded materials, transcripts, and extracted process notes. Kept with the request while we prepare, deliver, support, and document the service. They are included in an account deletion request unless a limited record must be kept for a legal, payment, fraud-prevention, or dispute reason.
• Payment metadata.Retained on Stripe’s side according to Stripe’s own schedule.
• Policy-acceptance records. Kept for six (6) years from the last verified transaction (or from the acceptance timestamp if the checkout is abandoned) so we can evidence your consent if it is ever disputed.
• Tax and accounting records.Kept for whatever period your jurisdiction’s tax and accounting law requires.

Third parties in use

The Service relies on a small set of processors, each operating under its own data terms:

• better-auth. The authentication software Pracenda uses to manage sign-in sessions and credential records within the Service.
• Railway and its infrastructure providers. Host the Pracenda application, PostgreSQL database, and private S3-compatible upload bucket. Customer and founder download routes verify authorization before retrieving a file, and the browser is never given bucket credentials or the underlying object key.
• OpenAI API. Processes recording audio for transcription and sampled video frames plus transcripts for structured workflow analysis. Pracenda sends only the media selected for analysis, sets Responses API storage off, and does not opt API data into model training. OpenAI may retain API abuse-monitoring logs for up to 30 days under its standard API data controls unless a different approved retention control applies.
• Stripe. Processes payments and issues receipts. The card details never reach our servers; only the Checkout Session ID, status, currency, and amount are stored here.
• Resend.Delivers transactional messages such as password resets, order updates, assessment results, and contact-form notifications on Pracenda’s behalf.

Your rights

Access

To request a copy of the personal data we hold about you, email greg@pracenda.com from the address connected to your account or assessment submission. We’ll confirm receipt and send the export within the same window described under Deletion below.

Deletion

Send a deletion request from your account or assessment email to greg@pracenda.com with the subject line “Data deletion.” This request covers account data, assessment submissions, intake answers, stored uploads, transcripts, and extracted process notes. We’ll confirm receipt within five (5) business days and delete account-level or assessment-level data within thirty (30) days. Any records Stripe holds on its side, and any tax or accounting records we are required to keep, are retained until the schedules above expire; when we complete deletion we’ll tell you which categories are still pending.

Marketing choices

Requesting an assessment result does not automatically enroll you in marketing. If you separately check the optional marketing box, you may later withdraw that choice by using the unsubscribe method provided in a marketing message or by emailing greg@pracenda.com. Withdrawing marketing consent does not stop transactional messages you specifically request, such as an assessment result or order update.

Contact

Any other privacy question — a specific record, a request we have not covered here, or anything else — goes to greg@pracenda.com.

AI-assisted draft. This document must be reviewed, edited, approved, and maintained by the organization using it.

This service produces an AI-assisted draft. It is not legal, HR, tax, medical, safety, or compliance advice.