Privacy Policy

SharpRoot is operated by SharpRoot. References to "SharpRoot," "we," "us," or "our" in this policy refer to SharpRoot. You can reach us at hello@sharproot.com.

Account information: Email address, name (if provided), and OAuth profile data if you sign in via Google or GitHub.

Uploaded research documents: Files you upload (PDFs, text files, audio recordings, CSV exports) are stored and processed to provide the theme extraction and analysis features.

Usage analytics: We use PostHog to collect anonymized usage data (pages viewed, features used, click events). This data helps us improve the product. PostHog is configured to not fingerprint users across sessions.

Cookies: Session cookies for authentication, and PostHog analytics cookies. No third-party advertising cookies.

To provide the SharpRoot service — processing your research documents, generating themes, PRDs, and tickets.

To send transactional emails (account confirmation, magic links, weekly digest if opted in).

To improve the product using anonymized analytics. We never use your research content to improve our AI models.

We use Anthropic's Claude API for AI features. Anthropic does not train models on API data. Your customer research is never used to train any AI model by Anthropic or by us.

We use OpenAI's API for text embeddings. OpenAI's API usage policy similarly excludes API data from model training by default.

Database: PostgreSQL hosted on Neon (AWS us-east-1). All data is encrypted at rest (AES-256).

Files: Uploaded files stored on Cloudflare R2 (EU and US regions). All files encrypted at rest.

We do not sell your personal data.

We share data only with the following processors, solely to provide the service:

• Anthropic (AI processing) — api-policy: no training on API data
• OpenAI (embeddings) — api-policy: no training on API data
• Neon (database hosting)
• Cloudflare R2 (file storage)
• PostHog (analytics — anonymized)
• AssemblyAI (audio transcription)
• Resend (transactional email)

You have the right to access, export, correct, or delete your data at any time. To export your data, use the export features in the app or contact us. To delete your account and all associated data, email hello@sharproot.com.

If you are in the EU or UK, you have additional rights under GDPR/UK GDPR, including the right to data portability and the right to lodge a complaint with your supervisory authority.

Active account data is retained for as long as your account is active.

After account cancellation, data is retained for 30 days to allow export, then permanently deleted. Backups are purged within 90 days.

We will notify you of material changes to this policy via email (to the address on your account) at least 14 days before changes take effect.

Questions about this policy? Email hello@sharproot.com.