The two kinds of information
- Information about your business: how your processes work, the systems you use, volumes, pain points, documents you upload. This belongs to your company. We handle it under our engagement agreement with them, and only for that engagement.
- Information about you: your name, role, work email and phone number, and the fact that you gave particular answers. We use this only to run the discovery work and to stay in touch about it.
What we collect
- Your answers in the questionnaire, saved as you type so you can return to them later
- Documents you choose to upload, such as an org chart or a sample document pack
- Your contact details, and the roles you tell us to speak to
- Notes our consultants add after our calls
- Standard technical records from our hosting provider
Please do not include
- Passwords, API keys or any system credentials
- Personal details about individual employees, such as salaries, performance records or identity documents
- Customer personal data, unless we have agreed in writing that it is needed
- Anything a third party has told you to keep confidential from us
If a document must include something sensitive to be useful, tell us and we will agree how to handle it first.
What we do with it
- Build an understanding of how your business works, through our Business MRI and Business Genome method
- Prepare for and run our discovery sessions
- Produce the reports, maps and opportunity lists your company has asked for
- Improve our own method in a general way, using what we learn but never your data or anything that identifies your company, and only where your agreement with us allows
We do not sell it, and we do not share it with other clients.
Who can see it
Only the 12C team working on your engagement. Our admin area is protected by a password and time-limited sessions, and every note records who wrote it. Your questionnaire link contains a long random code, so it cannot be guessed, but anyone who has the link can see and edit the answers. Share it only inside your team, and tell us if it needs to be replaced.
Where it is stored
Answers and notes are stored in our database in Singapore. Uploaded documents are stored with our hosting provider at web addresses that are long and unguessable but not password protected, so please avoid uploading anything highly sensitive. Our service providers are:
| Who | What they do for us | Where the data sits |
|---|---|---|
| Vercel | Hosts this website and our client applications | Singapore, with a global delivery network |
| Neon | Runs the database behind our forms and client questionnaires | Singapore |
| Resend | Delivers notification emails to us (when enabled) | United States |
| Google Workspace | Our company email and documents | Global, per Google's terms |
We will update this list before adding anyone new who handles your information.
How long we keep it
- During the engagement: for as long as the work continues
- Afterwards: up to 24 months, so we can pick up where we left off, unless your agreement with us says otherwise
- On request: your company can ask us to return or delete everything, and we will do so within 30 days, keeping only what the law requires us to keep
Artificial intelligence
Your questionnaire answers are not fed into any AI model today. If that changes, for example if we use AI to help summarise findings, we will say so here first, name the provider, and give your company the chance to object.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it, and you can withdraw consent to being contacted. Requests about your company's business information should come from your company. Ask us using the contact below. If you are unhappy with our response you can complain to the Data Protection Board of India, or to the data protection authority where you live.
Changes to this notice
We will update this page if our practices change, and tell your main contact when the change matters.
Questions or complaints
Kedar Poonja, Co-founder and CSO — kedar@12cstudios.com
Write to us at 12C Studios, 3rd Floor, Basappa Complex, Lavelle Road, Bengaluru, Karnataka 560001, India. We aim to reply within seven working days.