Controller. Paulo Jorge da Rocha Esteves Rodrigues. The service is operated under the brand The Wolf Strategy at thewolfstrategy.com. Privacy requests can be submitted through our privacy rights form.
This notice explains how personal data is processed when you visit the website, create an account, apply to the Founding 100 beta, use the meeting-preparation platform, upload files or meeting material, or provide feedback. It is intended to be read together with the Terms of Service and, where applicable, the Founding 100 Beta Terms.
1. Data we process
- Account and profile data: name, email, professional role, organisation context, language, profile preferences and authentication information.
- Meeting and stakeholder data: meeting titles, dates, objectives, attendees, professional notes, relationship context and observations that you choose to enter or import.
- Documents and communications: files, emails, reports, presentations and other material you upload for preparation or analysis.
- Post-meeting material: notes, transcripts, audio or video files that you are legally entitled to upload, together with resulting analysis.
- Beta and product feedback: application answers, ratings, comments, feature feedback and usage events used to evaluate the Founding 100 programme.
- Technical data: device/browser information, authentication events, logs, diagnostics and security information generated in the ordinary operation of the service.
2. Why we process it and our legal bases
We process account, profile and meeting data where necessary to provide the service you request and to perform our agreement with you. We may process limited technical, security and product-usage data for our legitimate interests in protecting the service, preventing abuse, diagnosing faults and improving the product, after considering the impact on users. Where processing is optional and consent is the appropriate legal basis — for example, marketing communications — consent is requested separately and can be withdrawn.
The Founding 100 application is processed to assess participation in the beta programme and to communicate the outcome of the application. Applying does not create employment, contractor or agency status and testers are not paid for participation.
3. Third-party personal data and meeting recordings
The Wolf Strategy is designed to help a user prepare themselves for professional meetings. It may nevertheless contain personal data about other meeting participants. You must only enter, import or upload third-party data where you have a lawful basis to do so and must provide any notices required by applicable law.
The platform does not give you permission to record a meeting. If you upload audio, video or a transcript, you are responsible for ensuring that the recording and subsequent processing are lawful in the relevant countries and workplace context, including obtaining consent or providing notice where required. Do not use the service for unlawful covert recording. Because recording rules vary significantly by jurisdiction, you should obtain local legal or employer guidance where the position is unclear.
4. AI processing
Uploaded material and structured meeting context may be processed by configured AI and infrastructure providers in order to generate preparation, summaries, recommendations and post-meeting analysis. Outputs can be incomplete or inaccurate and are intended to support human judgement, not replace it. The service is not designed to make solely automated decisions that produce legal or similarly significant effects about another person.
5. Service providers and international transfers
We use service providers for hosting, authentication, storage, database operations, file processing, security and AI model execution. These providers process data only to support the service under applicable contractual and security arrangements. Some processing may take place outside the European Economic Area. Where required, we rely on an adequacy decision or other recognised safeguards such as standard contractual clauses.
6. Retention
We keep personal data only for as long as necessary for the purpose for which it was collected, to provide the account, meet legal obligations, resolve disputes and protect the service. User-controlled meeting content is retained while it is needed in the account unless you delete it or request deletion. Residual copies may remain temporarily in provider backups or security logs according to normal backup and retention cycles. Founding 100 applications that are not selected will be deleted or anonymised after the recruitment and evaluation period unless a longer period is legally required or you separately opt in to future contact.
7. Your rights
Where the GDPR or equivalent law applies, you may have rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw consent without affecting prior lawful processing. You may submit a request through the privacy rights form. We may need to verify identity before acting on a request.
You also have the right to lodge a complaint with the competent supervisory authority. If the controller is established in Portugal, the relevant authority is the Portuguese Data Protection Authority (CNPD), without prejudice to your right to approach another competent authority where applicable.
8. Security and data minimisation
We use technical and organisational measures appropriate to the nature of the service, including restricted access controls and private file handling. No internet service can guarantee absolute security. Users should avoid uploading information that is not necessary for meeting preparation, particularly special-category or highly confidential data.
9. Children
The service and Founding 100 beta are intended for adults aged 18 or over and for professional use. We do not knowingly invite children to participate.
10. Changes
We may update this notice as the product, providers or legal requirements change. Material changes will be identified by a new version/effective date and, where required, users will be asked to acknowledge the updated notice.