Privacy Policy

1. Who We Are

Priowise is an AI-powered strategy execution and prioritization platform that helps businesses define objectives, align strategic decisions, and build impactful roadmaps.

Priowise is operated by Priowise B.V. (“Priowise”, “we”, “us”, or “our”), registered with the Dutch Chamber of Commerce (KvK) under number 42141576, with its registered office at:

We are committed to protecting your privacy and this policy explains how we collect, use, store, and protect data you provide to us, and outlines your rights and choices under the EU GDPR and CCPA.

1.1 Roles: Data Controller and Data Processor

Priowise B.V. operates in two capacities depending on information type:

Data Controller — For information collected directly in connection with operating the platform: account details, contact information, usage data, and billing-related information.

Data Processor — For business content uploaded into the platform where the customer acts as Data Controller: strategic plans, OKRs, features, and roadmap data. We process such data solely per your documented instructions. Our Data Processing Addendum provides additional detail on processor obligations.

2. What Information We Collect

Account Information

When registering, we collect your full name and email address. Authentication is handled by Clerk; Priowise does not store passwords. Third-party authentication (e.g., Google) provides only identity verification information.

Business Content

You may voluntarily submit business-related data including company name, strategic statements, goals, objectives, key results (OKRs), product or feature descriptions, roadmap items, and related notes. This information is central to service delivery and treated with confidentiality.

Usage Data

We automatically collect technical data including device type, browser, operating system, IP address, pages viewed, and features used. This supports platform performance, reliability, and user experience improvements.

Payment Data

Payments are securely processed by third-party providers (Stripe). We do not store full payment information, such as complete credit card numbers, on our servers.

Profile Photos

If you sign in with Google or Microsoft, your profile photo may be retrieved from your OAuth provider and displayed within the application. Profile photos are hosted by Clerk and are not stored on Priowise servers.

Referral Programme Data

When you participate in our referral programme, we store the email addresses of people you invite in order to track referral status and award referral rewards. Invitation data is deleted if the invitation expires without acceptance.

3. How We Use Your Information

Service Delivery

We use collected information to operate the Priowise platform, generate AI-powered strategy assessments, and maintain your account.

Personalization and Support

We tailor your experience to your business context and respond to support requests.

Improvements and Development

We analyze usage patterns to improve platform performance, reliability, and relevance.

Account and Subscription Management

We manage subscriptions, billing, invoicing, and administrative communications.

Newsletter Communications

If you sign up for our newsletter via the website, your email address is added to our newsletter contact list managed by Brevo. This is separate from transactional emails related to your account. You may unsubscribe at any time via the link in any newsletter.

Legal and Security Obligations

We use information to comply with legal requirements, enforce our Terms of Service, and maintain system security and integrity.

We do not use business content for advertising and do not sell data to third parties.

AI Processing

Some outputs are generated through an agentic AI system powered by Claude (Anthropic) as the primary AI model provider. Agents analyse different data components — objective validation, feature scoring, competitor insights, and research enrichment — to deliver precise, context-aware outputs.

Anthropic processes data under a Data Processing Agreement with Priowise. Data submitted to AI models is used solely to generate your requested outputs and is not used to train Anthropic's models, in line with Anthropic's commercial terms for API customers.

Where applicable, web search and market intelligence via Tavily may be used for enrichment tasks, operating under equivalent data protection agreements.

4. Cookies and Tracking Technologies

Essential (no consent required)

These cookies and storage mechanisms are strictly necessary for the platform to function and are set without requiring consent:

• Clerk — authentication and session cookies that keep you signed in.
• priowise_consent — stores your cookie preference (accept or decline).
• Browser localStorage — stores your active workspace preference and UI settings such as dismissed banners. This data remains on your device and is not transmitted to our servers.

Analytics and marketing (only after consent)

The following services are loaded only after you accept analytics cookies via the cookie banner shown on your first visit:

• PostHog — product analytics and usage tracking (EU servers).
• Google Analytics 4 and Google Ads — website analytics and conversion measurement.
• LinkedIn Insight Tag — conversion tracking and advertising measurement.

If you decline, none of these services are loaded and no analytics data is collected.

Changing your preference

You can change your cookie preference at any time by clicking the Cookie Settings link in the footer of any page. This reopens the consent banner so you can accept or decline analytics cookies.

5. Data Ownership and Use of Subprocessors

You retain full ownership of all business data submitted to Priowise, including strategic plans, objectives, key results, and roadmap details. Priowise will never sell or disclose business data for advertising, profiling, or competitive analysis.

Trusted subprocessors operate under strict data processing agreements:

• Anthropic — AI model execution (Claude)
• Tavily — web search and market intelligence retrieval
• Vercel — hosting and content delivery
• Supabase — application database (Frankfurt, Germany)
• Clerk — authentication and subscription management
• Inngest — background job processing
• Upstash — rate limiting
• PostHog — product analytics (EU)
• Brevo — transactional email
• Stripe — payment processing
• Cal.com — meeting bookings
• Google Workspace — business email
• Cloudflare — DNS and content delivery network

With consent, Google (Analytics and Ads) and LinkedIn receive website usage data for analytics and advertising measurement.

All providers maintain GDPR-compliant data protection standards.

6. Data Retention

Data is retained for as long as your account and workspace exist. Cancelling a paid subscription does not delete your data — your workspace and its contents remain accessible.

Workspace deletion: You can request deletion of your workspace from account settings. After a 5-day grace period (during which you may cancel the request), your workspace and all associated data are permanently and irreversibly deleted. Deleting your account through Priowise also triggers workspace deletion after the same grace period; however, deleting your account directly through the authentication provider (Clerk) does not automatically delete your Priowise workspace data.

Product deletion: Individual products can be deleted within a workspace. Deleted products are permanently purged after 30 days.

Residual copies in database backups expire within 8 days.

Billing records are retained for 7 years under Dutch law.

Product analytics data: event data is retained for up to 12 months.

7. Data Transfers and Storage Locations

Customer data is stored in the EU (Supabase, Frankfurt, Germany) and application servers run in Frankfurt.

Some subprocessors (e.g. Anthropic, Clerk, Stripe, Inngest) may process data outside the EEA, safeguarded by the EU-U.S. Data Privacy Framework where the provider is certified, or by EU Standard Contractual Clauses.

8. Your Rights (EU GDPR and CCPA Where Applicable)

You may exercise the following rights:

• Access — Request a copy of your data
• Correction — Correct inaccurate data
• Deletion — Request removal of your data
• Objection — Object to certain processing
• Restriction — Restrict data processing
• Data Portability — Export your data

Send requests to privacy@priowise.com. We respond within 30 days where legally required.

9. Data Processing Addendum (DPA)

Priowise includes a Data Processing Addendum as part of the Terms of Service, defining rights and obligations between the Customer (Data Controller) and Priowise (Data Processor). Enterprise customers can request a signed DPA.

10. Contact Information

For privacy or data protection questions:

Email: privacy@priowise.com