1. Who we are

This site is operated by Incubane B.V., a Workday consultancy and product company based in the Netherlands. We are the data controller for personal data collected through this site. You can reach us at info@incubane.com.

Registered address: Lange Viestraat 2B, 3511 BK Utrecht, the Netherlands.

2. What we collect, and why

We collect three categories of personal data on this site.

  • Information you give us directly. When you fill in the contact form, request a library asset, or register for an account, we collect your name, work email, company, and any free-text you share with us. We use this to reply to your message, send you the artifact you requested, and remember you on return visits.
  • Usage data. If you accept analytics cookies, we collect anonymous statistics about which pages people visit, which artifacts get downloaded, and which buttons get clicked. We use this to make the site more useful. We do not link this data to your identity.
  • Cookies and similar technologies. Essential cookies keep the site working (for example, your theme preference). Analytics and marketing cookies only run if you opt in via the banner. See our Cookie policy for the full list.

3. Our legal basis

  • Legitimate interest for replying to your enquiries and operating the website.
  • Consent for analytics cookies, marketing cookies, and newsletter sign-ups. You can withdraw consent at any time.
  • Contractual necessity when you are an active customer or supplier of Incubane, and to run the Rising Recap Agent for you when you use it.
  • Legitimate interestfor keeping the Workday setup and the questions you enter in the Rising Recap Agent, to follow up with relevant ideas and offers. We tell you at the account step. You can opt out at any time on the agent's privacy page; we delete the data straight away.

4. Who we share data with

We do not sell your data, ever. We share it only with the small number of service providers we use to run our business, listed on the Trust & security page. These providers are bound by data processing agreements and only process data on our instructions.

We keep personal data in the EU wherever we can. Where a provider processes data outside the EEA (for example Anthropic, for the AI in the Rising Recap Agent), it does so under an adequacy decision or the EU Standard Contractual Clauses.

5. How long we keep your data

  • Contact form messages: 24 months after our last reply, then deleted.
  • Library and Rising Recap Agent accounts: until you delete your account or ask us to.
  • Rising Recap Agent: see section 7.
  • Analytics data: 18 months, anonymised by default.
  • Customer engagement data: as required by the engagement contract and tax law (typically 7 years).

6. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete your data (“the right to be forgotten”).
  • Object to processing or ask us to restrict it.
  • Receive your data in a portable format.
  • Withdraw consent for cookies or newsletters at any time.

To exercise any of these rights, email info@incubane.com. We respond within one calendar month.

If you are not satisfied with how we handle your request, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. The Rising Recap Agent

The Rising Recap Agent is a free tool by Incubane, a Workday partner, for people who go to Workday Rising. It helps you plan Rising, capture notes and slide photos, and turn them into a field guide, a leadership deck and an action plan.

  • On your device. Your plan, notes, photos and reports are saved in your own browser. We cannot read them there.
  • Sync, if you say yes. The kit asks once per device. With sync on, an encrypted copy is stored in the EU (Ireland) so your devices stay in step. The key stays on your devices; we cannot read it. You can turn it off and delete it at any time. Everything synced is deleted on 15 January 2027.
  • The AI. When you ask the agent to plan, read your photos or write your report, the content of that request goes through incubane.com to Claude, an AI model by Anthropic. Photos are redrawn first, which removes location and device details. People you met go without the names you typed; a name printed on a photographed slide or badge is part of that photo. Anthropic does not train its models on this content and keeps it only for the limited period in its commercial terms. We do not store the content; we keep one line per request (your account, the time, the kind of request and what it cost) for 13 months, to keep the service free and fair.
  • Teams. If you invite colleagues, we store their work email and whether they joined. Invites nobody accepts are deleted after 30 days. What members share is encrypted for the team; the people they met are only shared if they tick it.
  • Your Workday setup and questions, for follow-up.The agent keeps us up to date with the Workday products your company uses and considers, your take on them after Rising, and what you came to Rising for (your focus questions). This is stored with your account and company domain, kept for 18 months after your last change, and used to send you relevant ideas and offers and in totals (for example, how many companies consider a product). It is company level only: your photos, notes, report and the people you met never reach us. We never sell it and never share it with Workday or anyone else without asking you separately. Opt out on the agent's privacy page; it is deleted straight away.
  • Newsletter. Only if you tick the box when you create your account.
  • Your account, your call. In the kit, under Privacy, you can download a copy of everything we hold about you and delete your account in one step. Or email privacy@incubane.com.
  • Please do not upload screenshots of a Workday tenant, employee data or anything confidential from your employer. The kit is for conference slides and your own notes.

Providers for the kit: Vercel (hosting, EU), Supabase (accounts, usage lines and encrypted copies, EU), Anthropic (the AI), Resend (emails), Mailchimp (the newsletter, if you subscribe), Cloudflare Turnstile (a bot check on sign-in) and Plausible (cookie-free statistics, EU).

8. Security

We protect personal data with the controls described on our Trust & security page. In short: EU-only processing, time-boxed least-privilege access, MFA without exceptions, and an incident response plan with a target acknowledgement of one business day.

9. Changes to this policy

When we change this policy, we update the date at the top and, for material changes, we send a notice to registered library users.

10. Contact

Questions, requests, or complaints: info@incubane.com.