Privacy Policy

The Short Version

You describe an SAP problem. Our AI matches you with vendors who can solve it. When you ask us to connect you with a vendor, we send that vendor your project details. That introduction is the product, and we would rather say so plainly than bury it in clause 14.

• We share your project details with a vendor only when you ask for the introduction.
• Chat messages are processed by third-party AI providers and stored on our servers.
• We do not sell your personal information. Advertising measurement (Google) runs by default outside Europe and only with your consent inside it; you can opt out any time from the footer.
• You can ask us to show you, correct, or delete your data at any time.

Who We Are

Intent Solutions operates this website and the vendor-matching service behind it. We are the matchmaker, not the vendor: we do not deliver SAP services, and we are not a party to any contract you sign with a vendor we introduce.

For anything in this policy, reach us through the contact page. Privacy requests go to a person, not a queue.

What We Collect

Account Information

When you create a solution seeker or vendor account: your name, email address, a hashed password (we never store the real one), your role, and any company details you add to your profile.

Chat and Search Activity

The messages you type into our chat and search, the responses our system generates, and the resulting match history. We store transcripts on our servers so your history works and so we can evaluate whether the matching is actually good.

Connection Requests

When you ask to be introduced to a vendor: the project description you provide, your name, and your work contact details. This is the information the vendor receives.

Newsletter and Contact

Your email address if you subscribe, and whatever you send us through the contact form.

Technical Data

Standard server logs: IP address, browser type, pages requested, timestamps. We use these for security and debugging, not profiling.

How We Use It

• To generate vendor matches from the problem you describe.
• To make the introduction when you request one.
• To run your account and send transactional email (verification, password resets, match updates).
• To measure and improve match quality. Reviewing where the engine ranked well or badly is how it gets better.
• To keep the service secure and prevent abuse.

Marketing Communications

If you tick the marketing opt-in at signup, Good Decisions Collective LLC and Intent Solutions will use your email address to send you marketing communications: product updates, insights, and promotional content. The box is unchecked by default; leaving it unchecked changes nothing about your account. You can withdraw consent at any time using the unsubscribe link in any marketing email or by contacting us, and transactional email (verification, password resets, match updates) is unaffected either way.

AI Processing

The matching runs on third-party AI services: Anthropic (the Claude API) generates and interprets chat, and Voyage AI turns text into the embeddings our retrieval uses. Your chat input is sent to these providers to produce your results, under commercial API terms. We do not permit our providers to use your inputs to train their models.

AI output can be wrong. Matches are recommendations to investigate, not verdicts. We say this here because a privacy policy should also be honest about what the system is.

Who We Share It With

Vendors

Only when you request an introduction, and only the details relevant to your request: your project description, name, and work contact information. Vendors agree to use that lead to respond to you, not to build marketing lists.

Service Providers

Companies that run parts of our infrastructure, bound by agreements that limit what they can do with your data:

• Hosting: WP Engine (this website) and DigitalOcean (the matching engine).
• Email delivery: Brevo, for transactional messages.
• Payments: Stripe, on its own hosted checkout pages. Stripe processes the card; we never see or store the number.
• AI processing: Anthropic and Voyage AI, as described above.

Legal Requirements

If the law compels us to disclose something, we comply, and we tell you unless we are legally barred from doing so.

We do not sell personal information to data brokers or anyone else. One advertising relationship exists: we advertise on Google, and while marketing cookies are on for you (by default outside Europe, by consent inside it), Google receives measurement signals from this site — whether an ad click led to a signup, and remarketing audience membership. Opt out, decline, or send the Global Privacy Control signal, and it receives only anonymous, cookieless aggregate counts. Opting out is one click in the footer and never harder than opting in.

Cookies

Strictly necessary cookies (sign-in, security, your consent choice) are always on. Google advertising-measurement cookies and PostHog product-analytics cookies are on by default outside the EU, EEA, UK and Switzerland, and off until you consent inside them. Change your mind any time via the Cookie Preferences link in the footer. The full list is in our Cookie Policy.

How Long We Keep It

Account data lives as long as your account does. Chat transcripts and match history are kept so your history works and so we can evaluate matching quality. Server logs rotate on a short schedule. When you delete your account, or ask us to delete your data, we remove it from our systems and instruct our processors to do the same.

Your Rights

You can ask us to show you the personal data we hold about you, correct it, export it, or delete it. Depending on where you live (the EU, the UK, California, and a growing list of U.S. states), some of these are statutory rights. We extend them to every user regardless of jurisdiction, because the alternative is a geography quiz nobody wins.

To exercise any of them, use the contact page. We will verify it is you and respond promptly.

Your California Privacy Rights (Notice at Collection)

Honesty first: we are currently below the CCPA's applicability thresholds, so most of this is not yet legally required of us. We follow it anyway, because these are the right defaults and our users should not have to check our revenue to know their rights. This section is our notice at collection.

What We Collect and Why

We do not collect sensitive personal information as California defines it, and we do not use or disclose personal information for purposes beyond those listed. Retention is described in "How Long We Keep It" above.

Sale and Sharing

We do not sell personal information and have not in the preceding 12 months. Unless you opt out, advertising identifiers are shared with Google for ad measurement and remarketing — California counts that as "sharing." You can opt out three ways, all equal: the "Do Not Sell or Share My Personal Information" link in the footer, the Cookie Preferences link next to it, or the Global Privacy Control browser signal, which we honor automatically. When you opt out, you will see confirmation on screen, and the sharing stops.

Your Rights Under the CCPA

• Know and access what we have collected about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Opt out of sale or sharing, as described above.
• Not be discriminated against for exercising any of these — same service, same price, either way.

To exercise any right, use the contact page. We verify it is you, then respond within 45 days.

Children

This service is for professionals buying and selling SAP services. It is not directed to anyone under 16, and we do not knowingly collect their data.

Changes to This Policy

When we change this policy, the date at the top changes with it. For material changes (new data types, new sharing), we will notify account holders by email before the change takes effect.