Privacy Policy

Battlecard is a product of Northr AI, operated by Natnitcha LTD, a company registered in the United Kingdom. Our platform is available at battlecard.northr.ai.

• Account information: email address and hashed password when you create an account.
• Battle card data: the business descriptions and competitor names you submit, and the generated battle cards stored in your account.
• Usage analytics: generation counts, simulation scores, and feature usage to improve the product. We use Plausible Analytics, which collects no personal data and sets no cookies.
• Lead capture emails: if you provide your email to download a battle card PDF, we store that email along with the company and competitor context.
• Cookies and local storage: session cookies for authentication and anonymous session tracking. See the Cookies section below for details.

• Provide the Battlecard service: generating battle cards, running sales simulations, and storing your competitive intelligence.
• Send battle card PDFs to the email address you provide during the download gate.
• Improve the product based on aggregate usage patterns (which features are used, which competitors are most searched).
• Process payments for paid plans via Stripe.
• Communicate service updates if you have an account. We do not send marketing emails unless you opt in.

Your data is stored in Cloudflare D1, a serverless SQL database running on Cloudflare's global network. All data is encrypted in transit via HTTPS. Passwords are hashed using industry-standard algorithms and never stored in plain text.

• Anthropic (Claude API): powers battle card generation and sales simulations. Your business descriptions and competitor names are sent to Anthropic's API. Anthropic does not use API inputs for model training.
• Stripe: processes payments for paid plans. We do not store credit card numbers. Stripe handles all payment data under their own privacy policy.
• Resend: sends transactional emails (battle card PDF delivery). Your email address and the PDF attachment are sent to Resend for delivery.
• Plausible Analytics: privacy-friendly website analytics. No cookies, no personal data collected, fully GDPR compliant.
• Clearbit (via logo.clearbit.com): fetches company logos for battle card display. Only the company domain is sent to Clearbit.

Battlecard offers an MCP (Model Context Protocol) server for integration with AI assistants. When using the MCP server:

• Raw sales call notes submitted via the intelligence capture tool are processed but never stored in full. Only structured extractions (competitor name, intelligence type, key findings) are retained.
• Aggregate field intelligence data (trends across users) requires a minimum of 10 contributing users before any aggregate data is surfaced. Individual company data is never exposed to other users.
• API usage is logged for rate limiting and abuse prevention. Logs include the tool called and a hash of the parameters, not the full request content.

• vr_session: HTTP-only session cookie for authentication. Set when you log in, expires after 30 days.
• bc_session: anonymous session cookie for tracking battle card generations by non-logged-in users. Used to enforce generation limits. Expires after 30 days.
• localStorage (bc_gen_count, bc_email): client-side storage for tracking how many battle cards you have generated and whether you have provided an email. Never sent to our servers automatically.

Account data and battle cards are retained for as long as your account is active. You can request account deletion at any time by contacting us at get@northr.ai. Upon deletion, all your data (account, battle cards, simulation history) will be permanently removed within 30 days. Anonymous generation records and lead capture data are retained for business analytics purposes but are not linked to your identity after account deletion.

For any privacy-related questions or data deletion requests, contact us at get@northr.ai.

Natnitcha LTD, United Kingdom