Privacy

This page explains what happens to the information you send us through Project Zero. It is written to be read rather than survived, and it describes what our software genuinely does rather than what a template says it might.

It applies to everyone, wherever you are. Project Zero is open to business owners anywhere in the world.

What we collect

Only what you type into the form:

• Your name, or whatever you choose to be called
• Your email address
• Optionally, a description of your business
• The challenge you describe
• Optionally, where in your business it happens, how often, and what it costs you
• Whether you asked for a copy of your Snapshot, and whether you asked for updates
• The Business Friction Snapshot generated from your answers

We also store the date and time of your submission and your browser’s user agent string, which helps us spot automated spam. That is the complete list. There is nothing hidden in it.

We use no tracking cookies and no advertising identifiers. If analytics is enabled on this site it is configured without them, and it never receives the contents of your submission.

How your Snapshot is produced

When you submit the form we generate a Business Friction Snapshot and show it to you immediately. It is worth being precise about how that happens, because “we analysed your submission” can mean very different things.

Your answers are not sent to ChatGPT, Claude, Gemini, or any other external AI service. There is no such integration on this site. The Snapshot is produced by a fixed set of rules written by hand and stored in this website’s own source code: your description is matched against a library of known operational problems, and the matching entry supplies the possible causes, the suggested actions and the measurement. The same submission will always produce the same Snapshot.

The practical consequences are worth stating. Nothing you write leaves our own systems in order to be analysed. Nothing you write is used to train a model, ours or anyone else’s. And because the rules are fixed and readable, we can always tell you exactly why your Snapshot said what it said.

The limitation is equally real: a fixed set of rules is not a consultant, and it does not understand your business. It recognises the shape of a problem it has seen described before. Where the Snapshot says may, it means may. If we ever add an AI-assisted analysis, it will be something you choose rather than something that happens to you, and this page will say so before it launches.

Why we collect it, and on what basis

There are two purposes, and they have different legal footings.

To reply to you. You gave us your address expressly so we could answer. Under the UK and EU GDPR this rests on your consent, given when you chose to submit the form.

To find patterns across many submissions. That is the entire purpose of Project Zero, and it rests on our legitimate interest in researching which business problems are worth building software for. We judge this proportionate because the information is volunteered, it concerns your work rather than your private life, and you can have it removed at any time.

You can withdraw consent whenever you like. It does not affect anything done before you withdraw it.

What we do not do

We do not sell your information. We do not share it with third parties for their own purposes. We do not add you to a marketing list. We do not publish or attribute anything you tell us to you or your business without asking you first and receiving a clear yes.

No decision affecting you is made by automated processing. A person reads every submission.

Where it is stored, and who else touches it

Three processors handle your data on our instructions, and no one else has access:

• Supabase stores submissions in a database hosted in Paris, France (eu-west-3).
• Resend delivers your submission to us by email, sending from Ireland (eu-west-1).
• Netlify hosts this website and processes the request when you submit the form.
• Simple Analytics counts visits, if analytics is switched on. It is hosted in the Netherlands, sets no cookies, follows nobody between sites, and never receives anything you type into the form.

Your submissions are stored and processed inside the European Economic Area. If you are in the UK or the EEA, this means your information does not leave that protection in normal operation.

These providers are international companies, so limited administrative access from outside the EEA is possible, for example when their support staff assist with an incident. Where that happens they rely on Standard Contractual Clauses. If you are outside the EEA, your information is transferred there when you submit the form, which is what allows us to receive it.

Access is limited to the people running Project Zero. That is currently a very small number of people at Dunjeestudios.

How long we keep it

We keep research submissions for up to twenty four months, then delete them. Findings that have been aggregated to the point where they cannot identify you or your business may be kept longer, because at that point they are no longer personal data.

Your rights

You can ask us to do any of the following, at any time, without giving a reason:

• Show you what we hold. We will send you a copy.
• Correct it. If something is wrong, we will fix it.
• Delete it. We will remove your submission and confirm when it is done. A copy may persist in our email provider’s delivery logs for a limited period before their own retention clears it.
• Restrict or object to how we use it, including our pattern research.
• Give you a portable copy in a machine readable format.
• Withdraw your consent for us to contact you.

Write to hello@dunjeestudios.com from the address you used, or tell us which address you used. We aim to complete requests within seven days and will not take longer than one month.

If you are in the UK or the EEA and believe we have handled your information badly, you can complain to your national data protection authority. We would rather you told us first so we can put it right, but you do not have to.

Security

Submissions are stored in a database with row level security enabled and no public read access. The keys that can read the data live only on our server and are never sent to your browser. This site is served over HTTPS.

No system is perfect. If we ever discover a breach affecting your information, we will tell you and the relevant authority as the law requires.

Children

Project Zero is intended for people running businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes to this page

If we change how we handle your information, we will update this page and change the date at the top. If a change is significant and we hold your address, we will email you about it rather than expecting you to notice.

Who we are

Dunjeestudios Ltd. Registered in Nigeria. RC 2000767. We are the data controller for the information described here. Questions about any of it go to hello@dunjeestudios.com, and a person will answer.