Privacy Policy

Effective Date:
Last Updated:
July 1st, 2025
April 22nd, 2026

1. Introduction

Vallenstone LLC ("we," "our," or "us") operates the website beyondpmf.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and participate in our Product-Company Fit research study.

We are committed to protecting the privacy and confidentiality of all research participants, particularly executives who share sensitive organizational insights.

2. Information We Collect

2.1 Personal Information

When you participate in our research study, we may collect:

2.2 Personal Information

We may collect certain information automatically when you visit our Service:

2.3 Third-Party Services

We use the following third-party services that may collect information:

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Research Study

3.2 Communication

3.3 Service Improvement

3.4 AI-Assisted Analysis and Automation

We may use artificial intelligence systems (including but not limited to Claude, ChatGPT, and other AI tools) to:

We use self-hosted automation tools (n8n) on German servers (Hetzner Online) to ensure data sovereignty and enhanced security for European participants.

Important: AI systems are used as analytical tools only. All personal and company-specific data remains confidential, and AI processing does not compromise the anonymization commitments outlined in this policy.

3.5 Google Analytics 4

This website uses Google Analytics 4 (GA4), a web-analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). GA4 uses cookies and similar technologies to analyse your use of this website. The information generated about your use of this website is generally transmitted to and stored by Google on servers in the USA. Data collected includes, among other things: your IP address (anonymised), pages visited, time on page, device and browser information, approximate location (country/city level), and referrer source. GA4 uses an event-based data model; direct identification of your person is not intended. IP anonymisation is active on this website — your IP address is truncated before any storage. The legal basis for processing is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG, which you grant via our cookie consent banner. You can withdraw your consent at any time with effect for the future. To the extent that data is transferred to Google in the USA, Google participates in the EU-US Data Privacy Framework. GA4 data retention: 14 months by default. For more information, see the Google Privacy Policy (https://policies.google.com/privacy) and https://support.google.com/analytics/answer/6004245.

3.6 Google reCAPTCHA

We use the "reCAPTCHA" service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on this website to protect our forms from misuse by automated bots. reCAPTCHA analyses visitor behaviour based on various signals. The analysis begins automatically when you visit a page with active reCAPTCHA and evaluates, among other things, your IP address, your time on the page, and mouse and keyboard movements. The data collected during this analysis is transmitted to Google and may be stored and processed on servers in the USA. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our online services from abusive automated use and SPAM. To the extent that data is transferred to Google in the USA, Google participates in the EU-US Data Privacy Framework. For more information about reCAPTCHA, see the Google Privacy Policy (https://policies.google.com/privacy) and Google Terms of Service (https://policies.google.com/terms).

4. Data Sharing and Disclosure

4.1 Research Publications

We may publish aggregated, anonymized research findings in:

Important: Individual responses and company-specific data will never be disclosed in publications without explicit written consent.

4.2 Academic Collaboration

We may share anonymized, aggregated data with academic partners for research purposes, ensuring no individual or company can be identified.

4.3 Service Providers

We may share information with trusted third-party service providers who assist in:

All service providers are contractually obligated to maintain data confidentiality and security.

4.4 AI Processing Partners

We may share anonymized, aggregated data with AI service providers for analysis purposes. These providers are contractually bound to maintain data confidentiality and are prohibited from using your data for their own purposes.

4.5 Data Processing Infrastructure

4.6 Legal Requirements

We may disclose information if required by law, court order, or governmental regulation.

5. Data Security

We implement robust security measures to protect your information:

6. Data Retention

6.1 Study Duration

Your personal data was retained throughout the research study period (concluded March 2026).

6.2 Post-Study Retention

Following study completion and results publication:

6.3 Newsletter Subscribers

If you subscribe to our newsletter, your email address will be retained until you unsubscribe or request deletion.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to:

7.2 Withdrawal and Deletion

You may:

7.3 Marketing Communications

You have granular control over communications:

7.4 Data Portability

You may request a copy of your data in a structured, machine-readable format.

8. International Data Transfers

While Vallenstone LLC is incorporated in the United States, our primary operations are EU-based. Your information may be transferred to and processed in the United States, European Union, and Germany (for our automation infrastructure hosted on Hetzner servers). We ensure appropriate safeguards are in place for international data transfers, particularly for participants in the European Union.

Data Processing Locations:

EU Data Protection: As EU-based operations, we maintain strict compliance with GDPR requirements and European data protection standards.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by:

11. Contact Information

For any privacy-related questions, requests, or concerns, please contact us:

Vallenstone LLC
16192 Coastal Highway
Lewes, DE 19958
United States

Email: support@beyondpmf.com
Website: beyondpmf.com
Data Protection Inquiries: Please include "Privacy Request" in your email subject line.

12. Compliance Information

This Privacy Policy is designed to comply with applicable data protection laws, including:


This Privacy Policy demonstrates our commitment to protecting executive privacy while enabling valuable research that benefits the broader business community. Your participation helps advance understanding of Product-Company Fit methodologies and organizational scaling best practices.