Privacy Policy

Last updated: May 14, 2025

1. Who we are

mybmctool.com is a browser-based Business Model Canvas tool. The Service is operated under the trade name mybmctool.com. For privacy questions, contact us at info@mybmctool.com.

2. What data we collect

  • Account data: your email address and hashed password when you register.
  • Canvas content: the text you type into your Business Model Canvases, stored in your account.
  • Usage data: which features you use, when, and basic technical information (browser type, IP address). We do not use third-party analytics trackers.
  • Payment data: processed entirely by Lemon Squeezy. We receive a confirmation of payment and your plan status. We do not store card details.
  • AI input: when you trigger an AI feature, the relevant canvas content or uploaded file is sent to the Anthropic API for processing.

3. Why we collect it

  • To create and maintain your account
  • To deliver the Service, including storing your canvases
  • To process payments and manage your subscription
  • To send transactional emails (account confirmation, billing receipts)
  • To power AI features when you choose to use them

We do not sell your data. We do not use your data for advertising.

4. Data processors

We use the following third-party services to operate mybmctool.com:

ProviderPurposeLocation
SupabaseDatabase and authenticationEU (Frankfurt)
BrevoTransactional emailEU (Paris)
Lemon SqueezyPayment processingUS (Privacy Shield)
AnthropicAI feature processingUS (Standard Contractual Clauses)

5. AI and your canvas content

Canvas content is only sent to Anthropic when you actively trigger an AI feature (e.g. "Analyze this canvas"). We do not send your data to Anthropic in the background. Anthropic does not use your prompts to train its models under our API agreement. For more information, see Anthropic's Privacy Policy.

6. Cookies

We use only essential session cookies required to keep you logged in. We do not use tracking cookies, advertising pixels or third-party analytics scripts.

7. Data retention

Account and canvas data is kept as long as your account is active. If you delete your account, your data is removed within 90 days. You can request earlier deletion by emailing us.

8. Your rights under GDPR

If you are based in the EU or EEA, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Data portability: receive your data in a structured format
  • Restrict or object to certain types of processing

To exercise any of these rights, email info@mybmctool.com. We will respond within 30 days.

9. Contact

Privacy questions, data requests or DPA enquiries: info@mybmctool.com.