Your North Star

Trust & Legal

Privacy Policy

Last reviewed 2026-07-17 · Applies across the Your North Star ecosystem.

1. Who we are

Your North Star is operated by Inge Steemans Coaching & Consulting (Sole proprietorship (eenmanszaak)), established in the NL.

We are the controller for personal data collected through our websites and products. This policy is the single canonical Privacy Policy for the Your North Star ecosystem (yournorthstar.today, .space, .app, .family, .works, .cc).

2. What we collect and why

We collect only what a specific interaction requires. We do not enrich, sell, or trade personal data.

2.1 Contact & invitation forms

When you write to us or request an invitation, we collect your name, email, organization (optional), interest category, and the message you send. Legal basis: taking steps at your request before entering into a relationship, and our legitimate interest in responding to you. Retained until the conversation concludes and for a reasonable follow-up window; then archived or deleted.

2.2 Newsletter

When you subscribe we store your email and the source of the subscription. Legal basis: your consent. You can unsubscribe from any email we send.

2.3 North Star Labs — cohort interest

We store your email, name, organization (optional), the concept you are interested in, and your note. Legal basis: taking steps at your request. Retained for the duration of the relevant Labs cohort programme and a reasonable follow-up window.

2.4 Feedback & testimonials

We store the product, rating, and — if you choose to write one — your reflection. If you explicitly consent, we may use your reflection as a testimonial (see the Customer Voice Constitution). Legal basis: your consent for testimonial use; legitimate interest for internal product improvement.

2.5 AI Opportunity Map

To generate your report we store the inputs you provide (organization context, priorities, constraints) and the report we return to you. Inputs are sent to third-party AI models via the Lovable AI Gateway. See the AI Statement for models used and limitations. Legal basis: performance of the service you requested.

2.6 Account & authentication

If you sign in, we store your email and authentication tokens on your device (browser local storage) for the duration of your session. Legal basis: contract / performance of the service.

2.7 Analytics

We use Plausible Analytics, a privacy-friendly, cookieless analytics service. Plausible does not use cookies or fingerprint you across sites; it aggregates page views and a small number of product events (perspective opens, assessment starts, form submissions). Legal basis: legitimate interest in understanding which pages help our audience.

2.8 Bot protection

Public forms use Cloudflare Turnstile to distinguish humans from automated abuse. Turnstile is privacy-preserving and does not use tracking cookies. Legal basis: legitimate interest in keeping our services available.

3. Processors we rely on

  • Supabase — database and authentication.
  • Cloudflare — content delivery, Turnstile bot protection.
  • Lovable — hosting and the AI Gateway used to reach third-party AI providers.
  • Plausible Analytics — cookieless website analytics.
  • Resend — transactional email delivery.

We choose processors that offer EU or comparable safeguards. A current sub-processor list is available on request via privacy@yournorthstar.today.

4. How long we keep data

We keep personal data only as long as needed for the purpose it was collected, or as long as we are legally required to. Concrete windows: contact / invitation messages — up to 24 months; newsletter — until you unsubscribe; Labs cohort interest — for the active programme plus 12 months; feedback — kept for the lifetime of the product unless you ask us to delete it; AI Opportunity Map reports — 24 months.

5. Your rights

You have the right to access, correct, delete, restrict, object to, and receive a portable copy of your personal data. You can also withdraw consent at any time for any use based on consent. We respond to requests within 30 days.

Contact: privacy@yournorthstar.today. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. International transfers

Some processors operate infrastructure outside the EU. Where they do, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Cookies

We use strictly necessary local storage for authentication and for saving assessment drafts. We do not use tracking cookies. See the Cookie Policy for the full list.

8. Changes to this policy

We update this policy when our processing changes. Material changes are announced on this page. The date at the top always reflects the last review.