Privacy Policy

What we collect

• When you buy: your name and email, and the amount, currency and Stripe customer and payment ids for your purchase. Stripe collects your payment details on its own checkout page; we never see or store your card number.
• When you claim a seat a company sponsors: your name and email, and which sponsor’s link you used. If you pay part of the price, the same purchase details as above.
• Your account: your name, email and time zone. Your password is handled by our authentication provider and stored only in hashed form.
• Taking the course: your progress, the answers you give to build your practice profile, and the work you save in each unit. When you take the course through Claude, Claude sends us what the course tools need; your conversations with Claude are covered by Anthropic’s own privacy policy, not this one.
• When you contact us: your name, email, company and message, the page you wrote from, and a one-way hash of your IP address that we use only to stop abuse.
• How you found us, only if you allow it: the referral code or campaign tags in the link that brought you here, with when and where you landed. We use this to credit the person or campaign that referred you.
• Technical data: our hosting providers keep standard server logs (such as IP address, browser and pages requested) for security and reliability.

How we use it

• To sell you the course, set up your account and give you access.
• To run the course: keep your progress and saved work between sessions.
• To reply to your questions and send you messages about your purchase and account.
• To credit referrals and learn which channels bring buyers, using the attribution above, and only with your consent.
• To keep the service secure, prevent abuse and meet legal, tax and accounting obligations.

We do not sell your personal information, share it for advertising, or use it to build advertising profiles.

Cookies and browser storage

We use a small number of cookies and browser storage items:

• Essential: sign-in cookies that keep you logged in, and a record of your cookie choice. These are needed for the site to work, so they do not need your consent.
• Optional: the referral or campaign tags from the link that brought you here, kept in your browser’s local storage for up to 30 days and sent with your purchase. We store these only if you click Accept. If you decline, or have not chosen yet, they are kept only until you leave the page.

We use no advertising or third-party analytics cookies. Stripe sets its own cookies on its checkout page, for payment security and fraud prevention, under its own policy. You can change your choice at any time with the "Cookie preferences" link at the bottom of our pages; declining deletes the stored tags.

Who we share it with

We share personal information only with the service providers that run the course for us, under contracts that limit their use of it:

• Stripe, for payments.
• Supabase, for our database and sign-in.
• Vercel, for hosting.
• Resend, for sending email.
• AI providers such as Anthropic, when a feature you use processes text with AI.

Sponsors: when a company sponsors seats, we tell it only how many of its seats were claimed. We do not tell a sponsor who claimed a seat, or anything about your progress or work. A sponsor’s own payment card is saved with Stripe, not with us.

We may also disclose information when the law requires it, to protect our rights or others’ safety, or as part of a sale or reorganization of our business.

How long we keep it

We keep your account, progress and saved work for as long as you have an account, and delete them within 30 days of a request to close it. We keep purchase records for as long as tax and accounting rules require, typically seven years. We keep contact messages as long as we need them to answer you. Attribution tags in your browser expire after 30 days.

Your rights

Depending on where you live (including the EU, the UK and California), you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, and to withdraw consent at any time. Email jordan@groundset.co and we will respond within 30 days. You will not be treated differently for exercising these rights. If you are in the EU or UK, you can also complain to your local data protection authority.

Where your data is stored

We and our providers store and process data in the United States. Where the law requires it, we rely on appropriate safeguards (such as standard contractual clauses) for transfers from other countries.

Security

We protect your information with encryption in transit, access controls and providers with strong security practices. No system is perfectly secure, so we cannot guarantee absolute security.

Children

The course is for professionals and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date above, and tell you by email if the change is significant.

Contact us

[Legal entity name, e.g. Groundset LLC], [Business mailing address]. Email: jordan@groundset.co.