1. About this policy
This Privacy Policy explains how Entrepreneurship OS handles information when you visit our public pages, create an account, or use a venture workspace. It applies to our website and application, including collaboration tools and optional integrations. It does not replace the separate privacy terms of services you access through external links.
For privacy questions or requests, email support@entrepreneurship.vn. Please identify the account and the nature of your request without sending passwords, verification codes, API keys, or unnecessary sensitive information.
2. Information we collect
We process information you provide and information generated when the service operates:
- Account and profile information: your email address, display name, organization, biography, skills, location, language preference, and notification settings. Some profile information is optional.
- Authentication information: sign-in and verification events and the session information needed to keep you signed in. Authentication uses the platform’s email verification or connected sign-in provider. Entrepreneurship OS does not ask you to create a separate app password.
- Workspace information: venture descriptions, ideas, customer research, assumptions, experiments, documents, tasks, forecasts, decisions, comments, votes, and the relationships between those records.
- Collaboration information: workspace membership, roles, invitations, assignments, mentions, document versions, and activity records.
- Technical and usage information: service requests, device/browser information, approximate timing of interactions, errors, and operational events needed to provide, diagnose, and protect the service.
- Support information: messages and materials you choose to send when asking for help.
Do not include unnecessary personal data about interview participants, customers, employees, or other people. Use aliases where practical and keep consent records when collecting research information.
3. Why information is used
We use information to authenticate accounts, provide and organize workspaces, apply membership permissions, save and recover work, deliver requested notifications, respond to support requests, troubleshoot problems, prevent misuse, and meet applicable legal obligations.
Usage information may help us understand whether features work reliably and improve the service. We do not make your private venture records public merely because a workspace is labeled as a demo. Public learning resources and policy pages are separate from private workspace content.
Where a legal basis is required, processing may rely on providing a service you requested, your instructions or consent, legitimate interests in maintaining a reliable and secure service, or a legal obligation. The appropriate basis depends on the activity and the law that applies to you.
4. Workspace sharing and permissions
An account’s access to a workspace depends on its active membership and role. Owners and authorized administrators can manage access within the limits of their roles. Other members may see information you add to shared documents, comments, tasks, and evidence records.
Before inviting someone or adding information, consider whether they should have access to it. A recipient may retain a copy of information they were lawfully able to view or export. Revoking membership does not automatically retrieve copies already made outside the service.
Administration of public website content does not, by itself, grant access to private venture workspaces. Fictional demo personas are illustrative records and cannot sign in or receive account privileges.
5. Service providers and disclosures
The service runs on Teable infrastructure and depends on the providers required to host the application, store data, authenticate users, and support its operation. If you choose Google sign-in, Google processes authentication information under its own terms and privacy policy.
We may disclose necessary information to service providers acting for the service, to parties you authorize, or when reasonably required by law, a valid legal process, the protection of rights, or the investigation of misuse. Access should be limited to what is appropriate for the relevant purpose.
A business transfer, if one occurs, may involve transfer of service records, subject to applicable protections and notice obligations. This policy does not authorize unrelated parties to use private workspace information for their own purposes.
6. Optional AI and personal provider keys
Core workspace tools can be used without AI. When an AI feature is available and you use it, the request and the workspace context you authorize may be sent to the selected AI provider. Review context before sending it and avoid including confidential or personal information you do not have permission to disclose.
Provider terms determine how that provider handles requests, retention, and any use of data for model improvement. Do not assume that all providers or account types offer the same protections. Using your own provider key may incur charges directly with that provider.
Personal key saving and managed AI remain unavailable until the required secure storage and provider configuration are in place. Do not send API keys by email or place them in venture documents. The interface will identify which AI connection, if any, is available; the existence of an AI screen does not mean a provider is connected.
7. Cookies and local preferences
The application uses the platform’s session mechanism to maintain authentication. It also stores preferences such as language and theme so that the interface can remember your choices. Session cookies and interface preferences serve different purposes; interface preference storage is not used to store personal AI credentials.
You can control cookies and local storage through your browser. Blocking essential authentication storage may prevent sign-in or interrupt workspace access. Removing a preference may reset the interface language or theme.
8. Retention, versions, and deletion
Workspace information is retained while needed to provide the workspace, support collaboration, preserve requested document history, or satisfy a legitimate legal or security requirement. Archiving a workspace is different from deleting it: archived records remain stored unless deleted through an available process.
Retention is determined by the purpose of the record, account and workspace status, applicable obligations, and the storage and backup configuration in use. A deleted record may not disappear immediately from all backups or operational records. Any retained copies remain subject to appropriate access restrictions and should not be restored for unrelated use.
If account deletion is not available as a self-service action, contact support. We may need to arrange ownership of shared workspaces before removing an account. A request to delete your account does not automatically authorize deletion of information that belongs to, or must remain available to, other legitimate workspace participants.
9. Your choices and rights
You can edit available profile fields and preferences, control the information you contribute, and use the export or deletion functions made available to your role and plan. Workspace owners can review membership and sharing decisions.
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing depends on consent. These rights can be subject to lawful exceptions, including the rights of other people and retention obligations.
Send a request to support@entrepreneurship.vn. We may ask for proportionate information to verify identity or authority. We will explain relevant limitations and handle requests within any period required by applicable law. You may also have a right to complain to a competent data protection authority.
10. International processing
Our infrastructure and connected providers may process information in countries different from the country where you live. Applicable safeguards and legal requirements depend on the provider, the data involved, and the jurisdictions concerned. Contact support if you need information about the processing arrangements relevant to your use before providing restricted data.
11. Security and incident handling
The application uses native authentication, server-side permission checks, limited data exposure, and controls designed to protect access to workspaces. Optional features that require additional security infrastructure may remain disabled until that infrastructure is configured.
No service can guarantee absolute security. Protect your email and sign-in accounts, review invitations carefully, and do not share verification codes. Report suspected unauthorized access promptly to support, including the affected workspace and approximate time, without disclosing secrets. Where required, affected users or authorities will be notified in accordance with applicable law.
12. Children and information about other people
The service is intended for people and teams who can lawfully use it and accept its terms. Where a user requires permission from a parent, guardian, or organization, that permission must be obtained. If you believe information about a child was provided without appropriate authorization, contact us so that it can be reviewed.
If you upload or record information about other people, you are responsible for ensuring you have the necessary authority, notices, and consent where required. Avoid collecting highly sensitive data unless it is necessary and you have confirmed that the service and your procedures are suitable for it.
13. Changes and contact
We may update this policy as the service or legal requirements change. The page displays its effective date and the date of publication. Material changes should be communicated through an appropriate service notice or another available channel when required by law.
Privacy requests and questions: support@entrepreneurship.vn.
14. Operator information to complete
Entrepreneurship OS is the service name used in this policy. The operator must still confirm its registered legal name, postal address, applicable jurisdiction-specific disclosures, and the detailed retention schedule for its chosen infrastructure. These details have not been provided and are not inferred from an account profile or domain name. Contact support if you need them before using the service for regulated or restricted information.