Privacy policy

Who we are

The Reactor is operated by Saadhana Studios ("we", "us"). This policy explains what personal data we collect, why, and your choices. It applies to the web app at reactor.saadhanastudios.com and related pilot communities.

Data we collect

• Account data — email address, authentication identifiers, and profile fields you choose to add (name, headline, skills, and so on).
• Product data — projects, documents, evidence, survey definitions, responses, community membership, and actions you take in the app.
• Survey respondent data — answers you submit, and optionally your email or name when a survey asks for them or you choose to provide them.
• Technical data — server logs, IP address, browser type, and similar diagnostics needed to secure and operate the service.
• Analytics data — only if you accept cookies (see below): page views, funnel events, and product usage signals via PostHog.

How we use data

We use your data to run accounts and communities, show the right content to the right people, send transactional email (invites, auth codes, survey summaries where enabled), improve the pilot, and keep the platform secure. Survey owners and programme facilitators can see responses and aggregates for surveys they manage.

Legal bases (UK / EEA visitors)

We process account and product data to perform our contract with you (providing the service). We process analytics data on the basis of your consent when you accept cookies in the banner. We may process data where necessary for our legitimate interests (security, abuse prevention) balanced against your rights.

Analytics cookies

With your consent we load PostHog (EU-hosted) to measure page views, sign-up funnels, and survey drop-offs. If you decline, the analytics script never loads and we do not send analytics events from your browser. You can change your mind by clearing site data for this domain and revisiting — the banner will appear again.

Event names are listed in docs/ARCHITECTURE.md (Analytics section) in the product repository.

Processors and sharing

We use trusted providers to run the product. They process data on our instructions:

• Supabase — authentication and database hosting
• Vercel — application hosting
• Resend — transactional email delivery
• PostHog (EU) — product analytics, when consented

We do not sell your personal data. We may disclose data if required by law or to protect users and the service.

Retention

We keep account and community data for as long as your account is active and as needed for the pilot. Survey responses are retained for the survey owner's programme unless deleted or exported. You can ask us about deletion — account delete/export features are on the roadmap (J19).

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or withdraw consent for analytics. Contact us to exercise these rights. You may also complain to your local data protection authority.

Children

The Reactor is aimed at founders and programme participants, not children under 16. We do not knowingly collect data from children.

Changes

We may update this policy. The date at the top will change when we do. Material changes may be highlighted in-product where practical.

Contact

Privacy questions: reactor@saadhanastudios.com. Service terms: Terms of service.