Privacy notice
Your answers and materials are processed to provide your self-assessment—not to build a commercial database, conduct research or train our models.
Information we process
We store the answers you submit, optional website extracts and uploaded documents, AI-generated drafts, evidence references, assessment revisions and your report. When you continue from the company step, we save your representative name and email and create or link a service profile. We record email confirmation, time-limited confirmation requests and sending status. Typing these fields alone does not save them. When you continue from the company step, selected documents and the website you provide are saved and processed to prepare editable answers. Existing answers are not overwritten. We record the accepted terms version, contact permission, session identifiers and technical usage information. Provide company-level information only; remove unnecessary personal data, credentials and individual health or other sensitive records.
Purposes and legal grounds
We use the necessary information to provide the service you request, including drafting, evaluation, report delivery and assistance. The proposed bases are performance of the service agreement with you and, when you act for a company, legitimate interests in providing that requested business service. Limited security and cost-control processing supports safe operation; legal obligations may require specific disclosures. Optional contact relies on your separate consent. The privacy acknowledgement is not consent to unrelated processing.
Confidentiality and authorised access
Only the designated administrator and necessary service providers may access data for service delivery, security or support. Your materials are not sold, published, used for sales research, scientific research, cross-company comparisons or model training by the operator. Permission to discuss your assessment does not authorise reuse of your documents. Read the confidentiality commitment.
Hosting, AI and email providers
ChatGPT Sites provides the hosting platform and administrator sign-in; Cloudflare infrastructure provides the application database and private file storage. Relevant answers and extracted source text are sent to the OpenAI API for drafting and evaluation. The application requests no stored response state. OpenAI states that API content is not used for training by default unless sharing is enabled, but security and abuse-monitoring retention can still apply, normally up to 30 days and longer where legally required. This is not a zero-retention promise. See the OpenAI data controls.
Email delivery is currently disabled. If enabled, Resend will process the recipient email, confirmation message and report for delivery. We do not submit applications to the European Commission or disclose your materials to investors or other applicants.
International processing
The controller is established in the United Arab Emirates. Service access and provider processing may occur outside the EEA; we do not promise EU-only storage. Before intake opens, the operator must confirm applicable processor agreements, lawful transfer safeguards and the relevant provider locations. You may request information about those arrangements from the privacy contact.
The need for an EU representative, or a valid exemption, must be resolved before opening intake to EEA users.
Retention and deletion
Completed assessments have a 30-day retention period from report generation; unfinished sessions have 30 days from creation. At expiry, access is blocked. The cleanup routine removes answers, contact details, uploaded files, extracted text, reports and revision history from active storage during service activity. A traffic-independent daily deletion schedule must be connected before intake opens. There is no promise that every provider backup or security record disappears at the same instant.
You can delete an assessment earlier from Your controls, using the same browser session. Token counts and cost records remain without the assessment link, content or identifying audit fields. Confirmation records are deleted with their assessment; the linked representative profile is removed when no assessments remain linked to it. A profile is used only for this service, not as a separate marketing database. Copies you download or receive by email are outside the application’s deletion controls.
Your rights and contact choices
Where applicable, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw optional contact permission without affecting your result or earlier lawful processing. Use Your controls, or email contact@siliconcp.com with your assessment reference. We may need proportionate identity verification. You can complain to a competent data-protection authority; see the European authority directory.
Automated findings
The tool generates preliminary findings using AI and fixed rules. They are not a decision awarding or refusing funding, and do not have that legal effect. You can correct answers and ask about an error; no human review of every assessment is promised. Source material is optional. Only basic applicant details and a description of the innovation are required for assessment. Guidance bullets are not a mandatory completeness checklist. The report provides an overall potential judgement, a separate application recommendation and available criterion findings; insufficient information limits the affected conclusion, not delivery of the other findings. Cap-table information may be left unassessed.