Privacy Policy

Excel Leadership International CIC, 9 Carolhill Park, Ballymena, Northern Ireland, BT42 2DF, Northern Ireland, United Kingdom, is the controller. For privacy matters contact s-p@esperra.com (attention: Simon-Piers O'Mahony).

• Account data — name, email, business profile, role.
• Scorecard responses — answers you give, the resulting score and recommendations (including before you create an account, if you take the public health-check).
• Roadmap & activity — milestones, next steps, sessions, community posts, points.
• Billing data — subscription and credit records (card details are handled by Stripe, not stored by us).
• Technical data — limited usage and security logs; a salted hash of IP for abuse prevention (not the raw IP).

• To provide the service (contract) — your roadmap, mentorship/coaching, billing.
• To match you with a mentor/coach (contract / legitimate interest).
• Security & abuse prevention (legitimate interest).
• Analytics & product improvement (consent) — only if you accept analytics cookies.
• Updates & marketing email (consent) — you can opt out anytime.

We use essential cookies to run the platform and, with your consent, analytics cookies. See the Cookie Policy for the full list and to change your choices.

We share data only with providers that help us run Esperra:

• Supabase — database, authentication, storage (EU region).
• Vercel — application hosting and aggregate, cookieless web analytics (no personal data, no cookies).
• Stripe — payments.
• Resend — transactional email.
• When enabled: Upstash (rate limiting), Sentry (error diagnostics), Amplitude (analytics), Cloudflare Turnstile (anti-abuse).

Mentors and coaches assigned to you can see the data needed to support you (your roadmap, scorecard results, session notes).

We host in the EU. Where a provider processes data outside your region, we rely on appropriate safeguards (such as Standard Contractual Clauses).

We keep personal data for as long as your account is active and as needed to provide the service. Unclaimed public scorecard responses and never-converted leads are deleted after a limited period. Financial records are retained as required by law.

Subject to applicable law (including the GDPR) you can request access, a copy (portability), correction, deletion, restriction, or object to certain processing, and withdraw consent at any time. To exercise these, email s-p@esperra.com. You may also complain to your local data protection authority.

We protect data with row-level security, encryption in transit, scoped access, and audit logging. No system is perfectly secure, but we work to keep your data safe.

Esperra is for business users and not directed at children.

We’ll post updates here with a new date. Questions? Email s-p@esperra.com.