Privacy Notice

1. Who controls your information

Hegarty AI Solutions FZ-LLC is the controller of the information described here. Our trade licence, registration number and registered address in Ras Al Khaimah, United Arab Emirates are set out in the “Who we are” panel at the end of this page. You can reach us at any time at support@hegartyaisolutions.com.

2. What we collect

• Contact and identity details: your name, email address, business name, role and any details you include in correspondence.
• Business answers: the responses you give in the free diagnosis consultation, including goals, constraints and the challenges you describe.
• Operational metrics: the figures and estimates you provide in the Business Metrics Questionnaire.
• Order and payment metadata: order status, amount, currency, Stripe session and payment identifiers, and the policy version you accepted at checkout. We do not receive or store your full card number.
• Generated reports and admin review records: your free diagnosis, your paid Growth Blueprint draft and final version, and the internal review record (score, reviewer, timestamps) that shows a person checked the Blueprint before it was sent.
• Security, error and usage data: server error records with identifying detail redacted, delivery audit records for emails we send you, and aggregate statistics about how far people get through the service.

3. Why we use it, and on what basis

• To provide what you asked for: preparing your diagnosis and, if you buy one, your Growth Blueprint. This is necessary to perform our contract with you, or to take steps at your request before entering into one.
• To support you: answering your questions and resolving problems. Contract performance and our legitimate interest in running a responsive service.
• Payments, records and accounting: meeting our legal and tax record-keeping obligations.
• Security and fraud prevention: protecting the service, our customers and ourselves. Our legitimate interest in a secure service, and our legal obligations.
• Improving the service: understanding, in aggregate, where the service works and where it does not. Our legitimate interest in improving what we offer.

Where a legitimate-interest basis applies, we have considered the impact on you and you can object. See section 8.

Statistical measurement of how far people get through the service is not essential to providing it. It runs by default on the basis of our legitimate interest, and you can switch it off at any time using the control on our Cookies page or in the footer of any public page. The choice applies immediately and can be reversed whenever you like. Essential services (security, the consultation, payments, delivery of your report and error monitoring) are unaffected by that choice. Events already recorded are anonymous and aggregate, so they generally cannot be linked back to you or removed retrospectively on the strength of an email request alone.

4. Who processes it for us

We use a small number of contracted providers. They act on our instructions under contract and may only use your information to provide their service to us.

• Supabase: the database and authentication platform that stores your submissions, reports and order records.
• Stripe: payment processing. Your card details are entered on Stripe’s own checkout and are handled by Stripe. We never see or store your card number.
• Lovable: application hosting and the AI gateway through which model requests are made.
• Google Gemini, accessed through the Lovable gateway : the model used to draft paid Growth Blueprint content.
• Resend, via Lovable email delivery: sending your diagnosis, payment confirmation and report links.
• Sentry: error monitoring, with personal detail scrubbed before events are recorded.
• Our own first-party, server-side analytics and PostHog : statistical measurement of how far people get through the service.

Your business answers may be transmitted to these contracted technology providers, including AI providers, so that we can prepare your report. We do not sell your information, and Hegarty AI Solutions FZ-LLC does not use it for unrelated advertising or profiling.

5. International processing

We operate from the United Arab Emirates and our providers operate internationally, so your information may be processed outside the country you are in. Where that happens we rely on the contractual terms we have with each provider, including data-protection and confidentiality commitments, together with technical measures such as encryption in transit and access controls. We do not claim any certification or audit standard we have not obtained.

6. How long we keep it

We do not operate an automatic deletion schedule. In practice we keep:

• submissions, metrics and reports for as long as needed to deliver and support the service and to answer later questions about what we provided;
• order and payment records for as long as tax, accounting and dispute-resolution requirements need them;
• security and error records for a short operational period, then only in aggregate form.

If you ask us to delete your information, we will do so unless we are required to keep a specific record, and we will tell you which records we have kept and why.

7. Security

Access to submissions and reports is restricted to the people who need it to deliver the service. Report links are private, time-limited and can be revoked. Secrets are held server-side. No service can promise perfect security, and we do not.

8. Your rights

Depending on where you are, you may have the right to access a copy of your information, to have it corrected, to ask for it to be deleted or its use restricted, to object to processing based on legitimate interests, and to receive certain information in a portable format.

Email support@hegartyaisolutions.com and we will respond. If you are unhappy with our response, you can complain to the data-protection or consumer authority in your own country, and to the competent authority in the United Arab Emirates.

9. AI transparency

Report drafts may be generated using AI. Every paid Growth Blueprint is then edited and reviewed by a person before it is sent to you. The service does not make solely automated decisions that have legal effects for you or similarly significant effects.

10. Children

This is a business service. It is not intended for children and we do not knowingly collect information from them.

11. Cookies and similar storage

See our Cookies and storage notice for what is stored in your browser and why.

12. Changes

This notice is version 2026-07-28. If we change it materially we will publish a new version here with a new version stamp.