Legal
Privacy Policy
Last updated: 6 October 2026 · Effective: 6 October 2026
The short version
We collect what we need to reply to you and to deliver the work you hire us for. We do not sell personal information. Recordings happen only with consent. You can ask us to see, correct or delete your data at any time.
1Who is responsible
Bit175 LLC, based in Texas, United States (support@bit175.com), is the controller of personal information collected through bit175.com, its companies Groundwork, Commonplace, Kindling and Baseline, and our sales process. When we process personal information inside a client's systems or materials on the client's instructions, we act as the client's processor under a data processing agreement.
2What we collect
| Category | Examples | Source |
|---|---|---|
| Contact details | Name, work email, company, role | You, through forms or email |
| Engagement information | Answers to intake questions, descriptions of workflows, documents you share | You and your team |
| Recordings | Audio, video and transcripts of interviews and working sessions | Sessions you agree to record |
| Billing | Billing contact, invoices, payment status (card details are held by our payment processor) | You and our payment processor |
| Site usage | Pages visited, referrer, approximate location from IP address, device type | Your browser, through privacy-respecting analytics |
3How we use it
| Purpose | Legal basis (where GDPR, UK GDPR or the NDPA applies) |
|---|---|
| Replying to enquiries and scheduling | Steps before a contract; legitimate interests |
| Delivering engagements and products | Contract |
| Recording and transcribing sessions | Consent |
| Improving our methods, using de-identified project data | Legitimate interests, with client consent for research use |
| Invoicing, tax and legal records | Legal obligation |
| Updates you sign up for | Consent, which you can withdraw at any time |
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
4Interview recordings
We ask for consent at the start of every recorded session and you can decline or stop the recording at any point. Recordings are made with a meeting notetaker, transcribed, and analysed to prepare your report. They are stored in access-controlled business accounts and deleted 90 days after your engagement ends, unless you ask us to delete them sooner.
5AI processing and service providers
We use AI systems to analyse transcripts and to build client deliverables. We use only business or API accounts whose terms say customer data is not used to train the provider's models, and we check those terms when we sign up and when they change. We share personal information with service providers only as needed to run our business:
| Provider type | Purpose |
|---|---|
| AI model providers: currently Anthropic (Claude), OpenAI (ChatGPT) and Google (Gemini), or another provider a client prefers on equivalent terms | Transcript analysis, deliverables |
| Meeting recording | Recording and transcription |
| Email and documents | Communication and file storage |
| Hosting and analytics | Running bit175.com |
| Payments and accounting | Invoicing and payment |
We may also disclose information where the law requires it, or to protect rights and safety, and to a successor if the business is sold or reorganised, under the same protections.
6International transfers
We are based in the United States and our team works remotely, including outside the United States. When we transfer personal information from the European Economic Area, the United Kingdom, Nigeria or other places with transfer rules, we use safeguards the law recognises, such as the European Commission's standard contractual clauses and the UK International Data Transfer Addendum.
7How long we keep data
Enquiries that do not become engagements: 12 months. Engagement files: 3 years after the engagement ends, or as the statement of work states. Interview recordings: 90 days after the engagement ends. Invoices and tax records: as long as tax law requires. Mailing lists and updates: until you unsubscribe.
8Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising these rights. This includes rights under the GDPR and UK GDPR, the Nigeria Data Protection Act 2023, and US state privacy laws such as California's.
Write to support@bit175.com. We respond within the time the applicable law sets and may need to verify your identity first.
9Cookies
bit175.com uses only the cookies it needs to work, plus analytics that do not track you across other sites. If we add cookies that are not strictly necessary, we will ask for your consent first where the law requires it.
10Children
Our site and services are for businesses and adults. We do not knowingly collect personal information from children.
11Security
We use access controls, encryption in transit, least-privilege access to client material, and removal of access when engagements end. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.
12Changes
We will post any update here with a new date, and tell active clients by email about material changes.
13Contact and complaints
Email support@bit175.com with "Privacy" in the subject line. You may also complain to your local data protection authority, for example a supervisory authority in the EU, the UK Information Commissioner's Office, or the Nigeria Data Protection Commission.