Who handles this site's data

We ask every vendor on the board to publish a list of the companies that handle their data. Few do. Here is ours.

Lovable hosts and builds this site. Lovable's privacy policy ↗
Supabase provides the site's database: provider portal accounts, claims and correspondence records, and the update email list. Supabase's privacy policy ↗
GitHub hosts the public data feed the board reads. The feed contains assessment data about companies and products, nothing personal. GitHub's privacy statement ↗
Google Workspace handles email to and from victoria@genedlabs.ai. Google's privacy policy ↗
Sign-in and account emails are currently sent through Supabase.
Google Analytics 4 measures how the board is used, and only after you accept analytics. Nothing is stored on your device until you do, and advertising features are switched off. Google's privacy policy ↗

That is the full list. If it changes, this page changes first.

What we do not hold

This site has no pupil accounts and processes no children's data. That is why there is no data processing agreement, no data protection impact assessment and no safeguarding page here: those documents exist for organisations that process pupil data, and we are not one. The same reasoning the board applies to tools applies to us: not every check applies to every kind of organisation, and saying which and why beats pretending.