Privacy
Privacy Policy
Last updated 20 August 2026
We sell governance. It would be a poor advertisement to be vague about our own data handling, so this page says plainly what we collect, why, who else touches it, how long we keep it, and how to make us delete it. There are two places on this website where you can send us anything: the AI Readiness Self-Scan form, and the AI concierge (“Ask the Machine”) that sits in the corner of every page. Almost everything below concerns those two.
01Who we are
Herculean Path Ventures, LLC, a New York limited liability company. We are the controller of the personal information described here.
- Postal: Herculean Path Ventures, LLC · 2806 US 11, LaFayette, NY 13084
- Email: bill@herculeanpathventures.com
02What we collect, and when
Nothing on this site requires an account, and you can browse every page — including taking the entire self-scan and seeing your score, level and radar — without giving us anything at all.
If you submit the self-scan form
Submitting the form to unlock your per-dimension breakdown sends us six fields. Three you type, three are carried along from the answers you already gave:
| Field | What it is | Required |
|---|---|---|
| Name | What you typed in the name box. | Yes |
| Work email | Where your results and follow-ups are sent. | Yes |
| Company | Your organisation's name. | No |
composite | Your overall readiness score out of 100. | Carried |
level | Your readiness band, Level 1 to Level 5. | Carried |
dimension_scores | Your 1–5 self-rating on each of the eight dimensions — purpose, data, systems, workflow, people, governance, economics, autonomy. | Carried |
Being explicit about the last one. dimension_scores is your own assessment of how your business is performing across eight areas. That is commercially sensitive, and you should know it reaches us rather than staying in your browser. It is what lets us send you a useful next step instead of a generic one. If you would rather we did not have it, take the scan and read your score without submitting the form — the score, level and radar are all computed in your browser and are yours either way.
If you use the site concierge
“Ask the Machine” is an AI agent we built and govern. Talking to it sends the text of your messages to our server, which forwards them to the model provider named in section 04 so a reply can be generated. That is the whole of what leaves your browser — there is no account, no cookie, and no identifier that follows you.
Please don’t put sensitive business information into the chat. Not because we are storing it — we are not, see below — but because it passes through a third party’s systems to be processed, and because a chat window is the wrong room for it. The free consultation is a private conversation with a human, under an ordinary duty of confidence, and it is what that material is for. The concierge is instructed never to ask you for personal or business details, and to point you at the self-scan or the contact page if you offer them.
Booking a call from inside the chat. The concierge can show you Bill’s next open times and open a booking form without sending you to another site. Those times come from Calendly’s availability API — we ask Calendly when Bill is free, and nothing about you is sent in that request. If you then pick a time, the form that opens is Calendly’s own embedded widget: it loads from Calendly’s servers, and whatever you type into it goes to Calendly, not through us. Calendly’s privacy policy governs that form, exactly as it does if you visit the booking page directly. Nothing from Calendly loads until you actually click to book.
What we keep is deliberately thin. Our own logs record the time of the request, a one-way hashed value derived from your IP address so we can rate-limit abuse, the number of tokens the model used, and whether one of the agent’s guardrails fired. They do not contain the text of your messages or of the agent’s replies. The conversation itself lives in your browser tab and is discarded when you close it.
If you email us or book a call
We receive whatever you put in the message, and Calendly receives whatever you give it when booking. Calendly's own privacy policy governs that booking page.
Analytics
We use Plausible Analytics, which is cookieless and does not collect or store any personal data or track you across sites or over time. It tells us aggregate things like how many people started the self-scan, how many finished all eight dimensions, and how many submitted the form. We cannot tie any of it to you. This is why the site shows you no cookie banner: there is nothing to consent to.
03Why we use it, and on what basis
- To send your results. You asked for a breakdown; we email it with the three prioritised moves for your level. This is us performing the thing you requested.
- To send two follow-ups. Over the following week you get two short emails related to your weakest dimension and your level. This is direct marketing on a legitimate-interest basis, and every one of them carries an unsubscribe link.
- To talk to you about working together, if your results suggest we can help.
- To improve the site, using the aggregate analytics above.
We do not sell your information. We do not share it with advertisers. We do not build profiles of you across other websites.
04Who else processes it
Four sub-processors, all acting on our instructions:
| Processor | What it handles | Why |
|---|---|---|
| Netlify | Site hosting; receives and stores form submissions. | Serves this website and captures the form. |
| Resend | Your name, email, company, score, level and dimension scores. | Delivers the results email and the two follow-ups. |
| Anthropic | The text of the messages you send to the site concierge, and the replies generated from them. | Runs the model that generates the concierge’s replies. It receives your messages in order to answer them, and applies its own retention and abuse-monitoring policy to what it processes. |
| Calendly | Whatever you enter on the booking form — typically your name, email and any note you add. Nothing about you is sent when we simply ask which times are free. | Provides the availability the concierge shows you, and hosts the embedded booking form. Calendly’s own privacy policy governs the form itself. |
All four are US-based, and your information is processed in the United States. We will update this list here if it changes — and we expect it to: we intend to move the concierge onto hardware we operate ourselves, at which point this table will say so and the model provider will come off it. Beyond these four, we disclose personal information only where the law requires it.
05How long we keep it
Site concierge logs are retained for 30 days from the date of the conversation, then deleted. As set out above, those logs are operational metadata — timestamp, hashed rate-limit key, token counts, guardrail outcome — and carry no message text. We hold no record of what you asked the concierge or what it answered.
Self-scan submissions are retained for 24 months from the date you submit, then deleted. If you become a client, engagement records are kept for as long as the relationship lasts and for whatever period our tax and legal obligations require afterwards. Aggregate analytics contain no personal data and are kept indefinitely.
06Your choices
- Unsubscribe. Every marketing email has an unsubscribe link. Use it and the remaining scheduled emails are cancelled.
- Ask what we hold. Email us and we will tell you, and send you a copy.
- Correct it. Tell us what is wrong and we will fix it.
- Have it deleted. Email us and we will delete your record from our systems and instruct our processors to do the same.
For any of these, write to bill@herculeanpathventures.com. We aim to respond within 30 days. We will not charge you, and we will not treat you differently for asking.
07Security
The site is served over HTTPS with HSTS. Submissions travel encrypted in transit and are stored by the processors named above under their own security programmes. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects your information we will tell you.
08Children
This is a business-to-business service and is not directed at anyone under 16. We do not knowingly collect information from children.
09Changes
If we change this policy we will update the date at the top. If a change materially affects information we already hold about you, we will email you about it rather than quietly rewriting the page.
10Questions
Write to bill@herculeanpathventures.com or Herculean Path Ventures, LLC, 2806 US 11, LaFayette, NY 13084. See also our Terms of Use.