← The Third Mission
Legal

Privacy Notice

What we collect, why we collect it, who can see it, and how to get it back or have it deleted.

Last updated 11 August 2026

The short version

We collect what the programme needs to run and nothing else. We do not sell your data, we do not advertise to you, and we do not track you across other websites. There are no third-party analytics or advertising trackers on this platform.

What we collect

Account details: your name, email address, and the mailbox address the platform issues you ([email protected]). Optionally a phone number, job title, avatar and email signature if you choose to add them in your profile.

Programme data: your cohort and team, your workbook answers and the scores computed from them, quiz attempts, deliverables, uploaded documents and files, tasks, certificates, and which class recordings you have watched.

Communications: messages you send in team channels and direct messages, posts and replies in the Diwaniya, and mail sent or received through your platform mailbox.

Technical data: your session cookies, and server logs containing your IP address and requests, which we use to keep the service running and secure.

Sensitive by nature: your assessment results

The Pathway includes psychometric-style self-assessments — the Entrepreneurial Characteristics Inventory, the Balance Test, the Lock Test and the entrepreneurial category questionnaire. Your answers and resulting profile are personal. They are visible to you and to the programme staff who mentor and assess you. They are never shown to other participants, and they are not used for any purpose outside the programme.

Why we may contact you

To run the programme: account and security messages, password resets, announcements from your facilitators, and notifications about your work. You can adjust notification preferences in your profile. Security and account messages cannot be switched off while you hold an account.

Who processes data for us

We keep the platform's supply chain deliberately short. The platform and its database run on a private server. Outbound email is delivered by Resend, and inbound email is routed by Cloudflare, which also provides the secure connection to the site. Where an AI assistant feature is used, the text you submit to it is sent to Anthropic to generate the response. Each of these processes data only to provide that service to us.

Who can see your data inside the programme

Your teammates see your team's shared work and the team channels. Facilitators, mentors and administrators of your cohort see your progress, submissions and assessment results in order to teach and assess you. Administrators can see account details and act on your behalf where support requires it; those actions are recorded in an audit log.

How long we keep it

We keep your account and programme record while you are enrolled and for as long as your institution needs it to evidence completion. Backups are retained on a rolling basis for a short period and then overwritten. When you ask for deletion we remove your personal data from the live system; residual copies in backups age out with those backups.

Your choices

You can see and correct most of your details yourself in your profile, change your password, and enable two-factor authentication. You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account — write to [email protected] and we will respond.

Cookies

We use cookies only to keep you signed in and to remember your language choice. There are no advertising or analytics cookies, so there is nothing here to opt out of.

Security

Connections are encrypted. Passwords are stored hashed, never in plain text. Access-card tokens and scratch codes are stored hashed and cannot be recovered — only replaced. Access to data inside the platform is restricted by role, and administrative actions are logged.

Contact

Questions about this notice, or a request about your data: [email protected].

Read the terms of use →

Privacy Notice — The Third Mission