Privacy information.
Notice version 2026-09-29-v3
Who handles the inquiry
Lunchbreak handles your inquiry. Privacy contact: support@lunchbreak.com.
What the form collects
The valuation form collects your company name, first and last name, role, email, and optional phone number and website. It then asks for your business type, employee-count range, years operating, tools used, and operating status.
Each time you continue to the next step, those answers are saved with your email and a dated progress history. Completed steps are retained even if you leave before sending the final request, and may be used to follow up about your inquiry.
Do not include raw datasets, customer details, passwords, access tokens, bank details, or confidential material. There are no file uploads or connected accounts at this stage.
Expert applications
When you apply for an expert role, we collect your name, email, LinkedIn profile link, and the role you selected. These details are saved only when you submit the application, together with its date and the contact notice shown to you. Unsaved entries remain in page memory and are not stored in your browser or saved as partial leads.
Approved staff use this information to review your professional background and contact you about suitable expert projects. We keep a record of follow-up status. Applying registers your interest; it does not create an employment agreement or guarantee a project. No résumé upload or connected LinkedIn account is required.
Technical quote and partner inquiries
The code quote form collects a technical inventory, languages or formats, approximate scale and history, and the asset owner’s follow-up details. The referral form collects the referrer’s own name, email, firm or practice, role, and optional non-confidential context. Do not include third-party contact details in a partner inquiry.
Partner details are used to discuss eligibility and referral terms. We retain the version of the advertised offer and the notice acknowledged with the inquiry. No introduction, acquisition, or fee agreement is created by submitting the form.
Why it is collected
The information is used to assess the inquiry, clarify authority and suitability, arrange follow-up, and keep a record of the review. It does not authorize a sale, transfer, model training, or other use of the underlying company records. Once an inquiry is no longer needed, we may keep anonymized or aggregated information from it, which no longer identifies you, to understand market and valuation trends.
Who can access it
Approved staff can access requests through a restricted review workspace. Hosting and database service providers process information on the operator’s behalf. The planned production stack uses Vercel for the application and MongoDB for request storage. Cloudflare R2 is reserved for a later, separately authorized file phase; this form does not transfer datasets there.
Storage and retention
We keep your inquiry and the contact details submitted with it for as long as we are evaluating, discussing, or pursuing a potential transaction with you, and for up to 36 months after our last contact with you. We may keep information longer where needed to comply with legal obligations, resolve disputes, or enforce our agreements. When information is no longer needed, we delete it or anonymize it so it can no longer identify you; we may retain and use anonymized or aggregated information without limit. Deleted information may persist in routine backups for a limited period until those backups are overwritten. You can ask us to access, correct, or delete your information by contacting the privacy contact above, and we will respond as required by applicable law.
The deployment region and any contractual location requirements must be confirmed before actual exports are requested. This notice makes no data-residency commitment.
Cookies and measurement
Unsaved edits remain in page memory; completed steps are stored on the server. Answers are not saved to browser storage. A short-lived essential cookie records successful submission confirmation. Staff sign-in uses an essential session cookie. Staff sessions expire after eight hours; confirmation expires after 30 minutes.
No session replay is installed. Anonymous daily counters measure assessment starts, completed steps, and validation failures only when you allow optional measurement, without recording field values. An essential preference cookie remembers your choice for 180 days. Use Cookie settings in the footer to change it, or read our Cookie Policy. Saved request and workflow counts help measure completion and qualification. The server limits request size and uses temporary hashed rate-limit identifiers to reduce abuse. Full form contents are not intentionally written to application logs.
Advertising is a separate optional choice. If you allow it, Meta Pixel sends page URLs, browser information, and actions such as role views, form starts, saved steps, and completed submissions to Meta. Meta uses these signals for advertising measurement and personalization on Facebook and Instagram. We do not add form answers, contact details, or LinkedIn profile links to pixel event parameters, and automatic form matching is not enabled. You can turn advertising off using Cookie settings. This stops future Lunchbreak pixel events, without recalling information already received by Meta or LinkedIn.
With advertising permission, LinkedIn Insight Tag also measures visits in our business and expert flows and, when configured, successful submissions. LinkedIn receives page URLs and browser information for ad measurement and retargeting. We do not send form answers or contact details with these events. LinkedIn may use advertising cookies; see LinkedIn’s Privacy Policy.
Your choices
You can leave the form before submitting, omit optional details, and ask for correction or withdrawal using the published privacy contact once intake launches. Requests about access, deletion, or other applicable privacy rights should also go to that contact.
Later review is separate
Any collection of actual datasets requires a separate agreed scope, authority checks, and appropriate handling terms. Removing names alone does not guarantee anonymity.