Founding cohort open: 10 places in Sell as you build at US$1,997 until 31 December (then US$2,997). Founding cohort: 10 places, US$1,997 Apply now
The Lean CPTO
Free MVP checkFree check

Privacy Policy

Last updated: 28 September 2026

This policy explains what personal information The Lean CPTO collects, why, and what we do with it. We’ve kept it in plain English.

The Lean CPTO (theleancpto.com) is based in Sydney, Australia (“we”, “us”). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Questions or requests: email hello@theleancpto.com.

What we collect

We only collect what you give us, plus basic information about how the site is used.

  • Free downloads (the Manual MVP Check, Pre-Sale Kit, Build or Sell First? Scorecard and Vibe-Coded App Audit): your first name, email address, which guide or page you signed up from, and whether you ticked the box for founder notes.
  • The chat bubble: your answers to the Manual MVP Check questions, and, if you send a question to Matt, your name, email address and question.
  • The Manual MVP Builder: the answers you type about your idea (what it is, who pays, the result, price and where you’ll sell), any follow-up questions, and your email address if you give it to get the PDF or ask more questions.
  • Applications for Sell as you build: your name, email address, where you’re based, your idea, your answers to the application questions and anything else you choose to tell us.
  • Payments: when you pay through Stripe, we receive your name, email address, billing country and payment status. We never see or store your full card number.
  • Workshops: registration happens on Luma, and live sessions run on Google Meet. Those services collect what they need to register you and run the session.
  • Flat white bids: if you buy flat whites on the Manual MVP Builder page, Stripe asks whether to show your bid on the public leaderboard: with a name you type, anonymously, or not at all. We only show what you choose. Private bids count towards the total but never appear in the list.
  • Emails to us: whatever you include when you write to us.
  • Site usage: we use Google Analytics (through Google Site Kit) to see which pages are visited and how people find the site. It uses cookies and collects information such as your approximate location, device and the pages you view. It doesn’t tell us who you are.

Please don’t put confidential or sensitive information (such as health information or other people’s personal details) into any form, the chat or the Manual MVP Builder.

Why we collect it

  • To send you what you asked for, such as a PDF, a plan or a reply.
  • To assess your application and, if you join, to deliver the program.
  • To take payments and keep business and tax records.
  • To send you founder notes, but only if you ticked the box. Every email has a one-click unsubscribe link.
  • To improve the site, our guides and our programs.
  • To protect the site from spam and misuse.

We don’t sell your personal information, and we don’t use it for anything unrelated to the reasons above without asking you first.

Who we share it with

We use a small number of service providers to run the site and the business. They only get what they need to do their job.

  • Hostinger: hosts the website and stores form entries.
  • Stripe: processes payments (United States and other countries).
  • MailerLite: sends founder notes, only if you opted in (European Union).
  • Anthropic: writes your plan and answers your follow-up questions in the Manual MVP Builder. Your answers are sent to Anthropic’s API for processing (United States). Anthropic’s commercial terms say it doesn’t use API data to train its models.
  • Google: Google Analytics, Google Meet for live sessions, and YouTube for the videos on this site (United States). Videos only load from YouTube when you press play.
  • Luma: workshop registration and reminders (United States).

Because some of these providers are overseas, your information may be stored or processed outside Australia. We choose providers that have their own privacy and security commitments. Each has its own privacy policy.

We may also share information if the law requires it, or to protect our rights or someone’s safety.

Cookies

The site itself doesn’t need cookies to work. Google Analytics sets cookies to count visits. You can block or delete cookies in your browser settings, and the site will still work. YouTube may set cookies once you press play on a video.

How long we keep it

  • Download sign-ups, chat questions and Builder emails: until you ask us to delete them, or until they’re no longer useful to us, whichever comes first.
  • Applications: for up to 2 years, so we can follow up about future intakes.
  • Payment and client records: for as long as Australian tax law requires, usually 5 to 7 years.

Keeping it safe

We use reputable providers, secure connections (HTTPS), spam protection and limited access to our systems. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

Your choices and rights

  • Unsubscribe from founder notes at any time using the link in any email.
  • Access or correct the information we hold about you by emailing hello@theleancpto.com.
  • Ask us to delete it and we will, unless we need to keep it by law (for example, payment records).

We’ll reply within 30 days. If you’re in the European Union or the United Kingdom, you have similar rights under the GDPR, including the right to object to how we use your information.

Complaints

If you’re unhappy with how we’ve handled your information, email hello@theleancpto.com and we’ll try to fix it. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We’ll update this page when anything changes, and change the date at the top.