Privacy Policy

Matt Peterson, doing business as Inflexxion Point (“we”) runs The Performance Playbook by Inflexxion Point. This page says what information the service collects, why, who else handles it, and what you can ask us to do. It covers the application at app.inflexxionpoint.com.

What we collect

• Account details. Your name and email address, a backup email address and cell phone number if you give them (so we can reach you about your account and help you recover access), and the sign-in records that keep your account secure: the time, browser type and rough location of each sign-in, which we use to tell you when a new browser signs in to your account.
• What you enter. The company profile, interview answers, notes, plans, targets, assignments, risk entries and other records you or your team type into the method.
• Financial information you provide. Figures you type, workbooks and documents you upload, and, if you choose to connect it, read-only accounting data from QuickBooks Online (accounts, transactions, balances, customers and vendors).
• Health Check and Vital Signs answers. The public Health Check keeps financial answers out of web addresses. Vital Signs readings are saved only when you save them to a client.
• Technical records. Basic logs of requests and errors that our hosting provider keeps to run and protect the service.

How we use it

Only to run the service for you: to score the diagnostic, produce your Scorecard, plan and Momentum Matrix℠, keep an audit trail of who recorded and approved what, and to keep the service secure. We do not sell your information and we do not show advertising. We do not use your company’s information to train AI models.

QuickBooks

• Connecting QuickBooks is your choice. We ask for read-only access to your accounting data and never change anything in QuickBooks.
• Connection tokens are encrypted when stored. Disconnecting, from this app or from inside QuickBooks, ends our access.
• We keep the newest three synced copies of your books for each client, plus any copy a saved report still depends on, and remove older copies.

AI drafting (optional, off until your company turns it on)

AI drafting is off for every company until an owner or leader agrees to it. When it is on, the engagement evidence you choose to draft from (KPI values, interview answers, notes and evidence titles) is sent to an AI model, provided by Anthropic, through Vercel’s AI Gateway to draft statements and answer questions. Requests are sent with the gateway’s zero-data-retention setting on and with training on your information turned off. Nothing an AI drafts counts until a named person accepts it. You can turn it off again at any time.

Claude connector (optional)

A person an administrator has approved can connect their own Claude assistant to see their own companies’ plans and readings, read-only and within daily limits. The connector does not read or return the Playbook’s own text, and it cannot change anything. What the assistant does with what it receives is governed by that person’s agreement with the assistant’s provider.

Who else handles your information

• Vercel: hosts the application and, when AI drafting is on, routes requests to the AI model.
• Supabase: stores the database and uploaded files, in the United States (AWS us-east-1).
• Intuit: only if you connect QuickBooks Online.
• Resend: sends the sign-in, invitation and notification emails.
• Anthropic: provides the AI model, only when AI drafting is on, reached through Vercel.
• Cloudflare: keeps the domain’s address records so the web address finds the service. Traffic to the service does not pass through it.

These providers handle information only to provide their service to us. We share information with no one else unless the law requires it.

Who can see your company’s information

Access is limited to the firm that runs your engagement and the people at your company who have been given access. The database separates one firm’s and one company’s records from another’s. Recorded observations and approvals are append-only: a correction is a new record, so the history stays intact. We also keep a permanent record of who opens a company’s financial figures and when; platform administrators and the company’s own owner can read it.

Cookies

We use cookies only to keep you signed in, to remember a display preference, and to recognise a browser you have signed in from before so we can tell you about a new one. We do not use advertising or cross-site tracking cookies.

Security

Information is encrypted in transit, accounting tokens are encrypted when stored, and access is checked on every request. No system is perfectly secure, and if we learn of a breach affecting your information we will tell you promptly.

How long we keep it, and deleting it

We keep your information while your account is active. To have a company’s information, or your account, deleted, or to get a copy of it, email info@inflexxionpoint.com. We will confirm who is asking before we act. When we delete a person, the records of what was done keep their entry but no longer name them. Encrypted backups kept by our database provider age out on that provider’s schedule.

Children

The service is for businesses and is not directed to anyone under 18.

Changes

If we change this policy in a way that matters, we will update the date above and tell account holders by email.