Privacy policy

Last updated September 5, 2026

There Squared runs Inno, a tool that helps founders test an idea through customer interviews. This policy says what we collect, why we hold it, who else touches it, and how you get it deleted. It covers the marketing site and the app.

What we collect

Your account. Your email address and a password we never see in plain text. If you sign in with Google, we receive your name, email address and profile picture from Google — nothing else from your Google account.
What you tell us at sign-up. Your name. If you sign up as an innovation manager, we also store your organization, your answers about cohorts, and whether you offered to be interviewed.
Your project work. Project names, overviews, customer segments, problems, value propositions, interview guides, questions, prep notes and the team members you name.
Interview material. Audio you record in the app or upload, transcript files you upload, the transcript text itself, the names and LinkedIn addresses of the people you interview, and the quotes, tags and notes you attach to a transcript.
Feedback. Anything you send through the feedback form in the app footer, including whether you asked for a coaching session.
Product usage. A record of which actions you take in the app, stored against your user id. We use it to see which parts of the product work. We run no advertising trackers and set no advertising cookies.
Technical logs. Our host records the usual request information — IP address, browser type, and the page requested.

The only cookies we set are the ones that keep you signed in. There is no analytics cookie and no ad network.

Why we hold it

To give you an account and keep you signed in.
To store and show the work you do in the app.
To turn your interview audio into a transcript.
To answer your feedback and support requests.
To fix faults, prevent abuse, and decide what to build next.

We do not sell your data. We do not share it with advertisers. We do not use your project content or your interview transcripts to train machine learning models.

Who else processes it

These companies handle data on our behalf, under their own contracts and privacy policies:

Supabase — our database, sign-in system and file storage. Your account, your project content and your interview audio all live there. Supabase privacy policy.
Vercel — hosts and serves both sites, and keeps the request logs. Vercel privacy policy.
AssemblyAI — turns interview audio into text. When you start a transcription we send the audio file to AssemblyAI, which holds it while it produces the transcript and returns the result to us. AssemblyAI privacy policy. Transcript files you upload as text are parsed by us and never go to AssemblyAI.
Google — only if you choose to sign in with Google. Google privacy policy.

All four store data in the United States. If you use Inno from elsewhere, your data is transferred there. We will update this list before we add a new processor.

The people you interview

You control what you record and upload. Before you record someone, get their permission, tell them the recording goes to a transcription service, and follow the recording law where you both are. Do not upload a recording you have no permission to share. We act on your instructions for this material — you are responsible for it.

If someone you interviewed wants their recording, transcript or name removed, delete the interview in the app. Write to us at billing@theresquared.co if you need help.

Who can see your work

Your projects are private to your account. Postgres row level security enforces that in the database, not just in the interface.

One exception: you can create a share link for a findings report. That link holds a secret token, and anyone who has it can read that report without signing in. It stays readable until you revoke it in the app. Send it only to people you mean to show.

How long we keep it

Delete a project and we delete everything under it — interviews, audio, transcripts and insights — straight away.
Ask us to delete your account and we remove your account and all of its content within 30 days.
Encrypted backups can hold deleted content for up to 30 more days before they age out.
Anything we must keep by law, we keep for as long as the law requires.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to billing@theresquared.co from the address on your account. We answer within 30 days.

If you are in the UK, the EEA or California, local law gives you further rights — to object to a use, to restrict one, or to complain to your data protection authority. Ask us and we will explain how your request applies.

Security

Traffic to both sites uses HTTPS. Interview audio sits in a private storage bucket that only your account can read. Every table is behind row level security. No system is perfect, so tell us at billing@theresquared.co if you find a weakness, and we will fix it.

Children

Inno is for adults at work. Do not use it if you are under 16. We do not knowingly collect data from children, and we delete it if we find it.

Changes to this policy

We update this page when the product changes. The date at the top shows the last change. If a change matters to you, we will email the address on your account before it takes effect.

Contact us

There Squared — billing@theresquared.co