Privacy Policy

1. Controller and scope

Chalkline Reports is a Design Glyphe Limited product. For this website and the diagnostic workflow, the data controller is Design Glyphe Limited operating Chalkline Reports.

• Privacy contact: privacy@chalklinereports.xyz
• General legal contact: legal@chalklinereports.xyz

This policy applies to information collected when you visit the website, start or complete the Reputation Intelligence Report, access a hosted report, or communicate with us in connection with the report.

2. Personal data we collect

Depending on how you use the site, we may collect the following categories of data:

• Identity and contact data: first name, business name, business email address, phone country code, phone number, and any contact channels you authorize.
• Business profile data: trade, revenue band, business age, business website, and implementation preference.
• Diagnostic response data: booked-estimate volume, average project value, close-rate signal, lead-source mix, review signals, database status, stated bottleneck, urgency, and other diagnostic answers you submit.
• Generated report data: the instant diagnostic summary, modeled opportunity range, score breakdown, analyst-team workflow support data, and the report token that addresses your hosted report.
• Communications data: the contents of emails, replies, or direct diagnostic follow-up messages you send us.
• Technical and browser data: basic request metadata required to deliver the site, plus short-lived browser storage used for the assessment fallback workflow described in our Cookie Policy.
• Public information about the business being assessed: reviews and the text of those reviews, ratings, listing details, search results, and the same kinds of public information about competing businesses named in the report. We read this from public sources rather than collecting it from you.

That last category is different from the others and we would rather say so plainly than leave it inside a list. Review text is written by members of the public, it can carry the name a reviewer chose to publish alongside it, and a report may quote it so that a finding can be traced to the words it rests on. Those people are not our customers and did not give us anything. We read only what is already published, we use it to describe the business being assessed and not to build a profile of the reviewer, and where somebody objects to our use of what they wrote, the contacts in the final section will reach us.

3. How we use personal data

We use personal data only for legitimate business and service purposes connected to the website and diagnostic.

We do not sell personal data. We do not authorize third parties to use your diagnostic answers for their own advertising. We do not promise anonymous benchmarking or dataset training uses beyond internal service improvement unless and until this policy is updated to say so.

4. Automated analysis and human review

Part of how a report is produced is automated, and you should know that before you read one rather than after. The public information described in section 2, together with the answers you give us, is processed by automated analysis systems that read the material and draft findings: what the reviews say, how the business stands against the competitors named, and which of the report’s measures can be supported by what was actually observed.

Two things are true about that process and both matter more than the fact of automation itself.

• A person decides what ships. Drafted findings pass human review gates before a report is released, and a report that does not pass is not sent. The automated step prepares the work; it does not sign it off.
• Nothing here decides anything about you. These systems produce a description of a business and an estimate of what a gap may be worth. They do not determine creditworthiness, eligibility, employment, or any other outcome with a legal effect, and no decision of that kind is made about any individual on an automated basis.

We do not use the material described in section 2 to train general-purpose models, and we do not permit the providers who supply these systems to use it for that purpose.

If you believe a finding about your business is wrong, you can tell us and ask a person to look at it again. The contacts are in the final section.

5. Who we share data with

We may disclose limited personal data only where that is reasonably necessary to operate the site or comply with law.

• website hosting and application infrastructure providers
• hosted database and storage providers that keep the records described in this policy
• identity and sign-in providers used to control staff access to internal tools
• payment providers that take and record payment where a paid product is bought
• domain, networking, and delivery providers
• communications providers we use to send diagnostic-related messages on approved channels
• search, mapping, and business-listing data providers that supply the public information the diagnostic reads
• providers of the automated analysis systems described in this policy, which process the material the diagnostic reads in order to draft findings for human review
• professional advisers and law-enforcement or regulatory bodies where disclosure is legally required

We may also disclose data where required to enforce our Terms and Conditions, investigate misuse, protect rights or safety, or comply with a lawful request from a court, regulator, or public authority.

6. Retention and hosted report availability

We aim to keep personal data only for as long as reasonably necessary for the purpose for which it was collected. The current launch implementation has important limits that you should understand.

7. Security and confidentiality

We use reasonable technical and organizational measures to protect personal data appropriate to the nature of the diagnostic workflow. No internet transmission or storage environment is completely secure, and we cannot guarantee absolute security.

Hosted report links are bearer-style URLs. Anyone with an active link can view that report while it remains available. You should only forward that link to people you intend to have access.

8. Cross-border processing

Chalkline Reports serves business users in the United States, the United Kingdom, and select African markets. Your information may be processed in countries other than the country where you are located.

Where applicable law requires transfer safeguards, we intend to rely on appropriate contractual, organizational, or statutory transfer measures. Additional GDPR-specific details are provided in the GDPR Policy.

9. Your rights and choices

Subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of, portability of, or objection to our processing of your personal data.

• You can ask us to correct inaccurate contact or business details.
• You can ask us to delete or stop using information where the law allows and no overriding recordkeeping obligation applies.
• You can withdraw consent for optional operational notes at any time.
• You can ask whether an active hosted report link remains available.

Requests should be sent to privacy@chalklinereports.xyz. We may request reasonable verification before acting on a request.

10. Business-use limitation and minors

The website and diagnostic are intended for business users evaluating Chalkline Reports for a commercial operation.

The website and diagnostic are not directed to children. We do not knowingly solicit or process personal data from anyone under 18 in connection with the Chalkline Reports website.

11. Changes to this policy

We may update this Privacy Policy to reflect product changes, legal requirements, or operational changes, including any future move from transient application storage to a durable backend. The effective date at the top of this page will change when a revision is published.

12. Contact us

Privacy questions, rights requests, or data-related complaints should be sent to the contacts below:

• Privacy: privacy@chalklinereports.xyz
• GDPR-specific: gdpr@chalklinereports.xyz
• General legal: legal@chalklinereports.xyz