Privacy Policy
Last updated: 5 May 2026
This Privacy Policy explains how Xcell Innovation Technology Ltd ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the growthsprint. platform at www.growthsprintstrategy.com. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Xcell Innovation Technology Ltd. Registered in: Northern Ireland, United Kingdom. Contact: hello@growthsprintstrategy.com
2. What Data We Collect
We collect the following categories of personal data: Account information (name, email address, password hash), Profile information (job title, organisation, profile photo), Business information (canvas content, sprint board data, strategic notes, journal entries), Usage data (pages visited, features used, session duration), and Communication data (messages sent within the platform, contact form submissions).
3. How We Use Your Data
We use your data to: provide and operate the growthsprint. platform, authenticate your identity and maintain your session, enable collaboration features, generate AI-powered analysis and reports, send transactional emails (account setup, password reset, notifications), respond to support and contact enquiries, and improve platform performance and reliability.
4. Lawful Basis for Processing
We process your data under the following lawful bases: Contract (to deliver the service you have signed up for), Legitimate interests (to improve and secure the platform), and Consent (for optional communications such as newsletters).
5. Data Retention
We retain your personal data for as long as your account is active, or as required to provide the service. If you close your account, we will delete your personal data within 90 days, except where retention is required by law.
6. Third-Party Processors
We share data with the following trusted third-party processors: Google (authentication), OpenAI (AI-powered analysis), Anthropic (AI-powered analysis), SendGrid (transactional email), and Neon (database hosting). All processors are required to handle your data in accordance with applicable data protection law.
7. International Transfers
Some of our third-party processors are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
8. Your Rights Under UK GDPR
You have the right to: access the personal data we hold about you, correct inaccurate data, request deletion of your data, restrict or object to processing, data portability, and withdraw consent at any time. To exercise any of these rights, contact us at hello@growthsprintstrategy.com.
9. Cookies
We use essential cookies to maintain your session and a consent-gated analytics cookie (Google Analytics) to understand how the platform is used. You can control cookie preferences through the cookie banner on first visit.
10. Contact Us
For any questions about this Privacy Policy or how we handle your data, contact us at: hello@growthsprintstrategy.com