Privacy
We collect almost nothing. Here is the almost.
Most privacy pages are long because the company is doing a lot. This one is short because we are not — and the parts that would normally be buried are the parts we put first.
Effective September 6, 2026 · Controller: GENIC FILM LLC, Los Angeles, California
1. Site analytics and the free review
Cloudflare hosts this site and provides aggregate Web Analytics, including page views, visits, referrers, approximate country, device and performance information. Cloudflare’s Web Analytics does not use cookies or local storage to collect usage metrics. We use these reports to understand which pages and sources are useful. See Cloudflare Web Analytics.
We do not add advertising pixels or session-replay tools. The site may include Cloudflare’s analytics script and security protections. Our own site code sets no cookies and stores no campaign identifiers in your browser.
The free review form builds a prompt in your browser. It does not submit its fields to us or save them. Copying the prompt to an AI provider shares it with that provider under its policies. Downloads and ordinary page requests still pass through our host.
Campaign tags in a URL can pass into our own page links, Polar checkout and Calendly booking links. Do not put personal or confidential information in these tags. Gumroad uses its own affiliate attribution, including cookies, on its platform; its policies apply when you follow an affiliate link or buy there.
2. What we actually collect
Information connected with using the site or contacting us:
| When | What we get | Why |
|---|---|---|
| You buyThrough Polar or Gumroad | Name, email, country, amount, and the order record. Never your card details — those go to the checkout provider and its processors, and we cannot see them. | To deliver the files, send updates you are entitled to, and honour refunds. |
| You email ussupport@ or a reply | Your email address and whatever you write. | To answer you. Kept so we have the thread if you write again. |
| You apply to a cohortVia our intake form (a Notion form) | The answers you give: your role, company stage, which AI platform you use, and how to reach you. | To select the cohort and run the usability study. Optional field 13 is the only place you can opt in to hearing from us later — the default is nothing. |
| We email you coldSee section 4 | A business email address collected from public sources, plus the public company details around it. | To introduce the product once. Section 4 explains this in full, including how to end it permanently. |
If you book optional setup through Calendly, we receive your booking details and answers. If you request support or setup help, we see material you deliberately share for that purpose. If you join the creator program, Gumroad provides affiliate and attributed-sales records. There is no SECOND FOUNDER account password to create.
3. What never reaches us
- Records you keep in your own workspace. Your constitution, your decisions, your ledger, your company's facts — those live in your Claude or ChatGPT workspace and your own Notion. There is no sync, no telemetry, no phone-home. We do not receive those records unless you deliberately share them for support or separately agreed setup work.
- Your payment details. Handled by Polar or Gumroad and their processors.
- Anything we sell. We do not sell, rent, or trade personal information, and we never will. There is no advertising business here to feed.
4. If we emailed you and you never asked us to
We run cold outreach to businesses. Most companies hide this in a subclause; we would rather say it in a heading.
Where your address came from: a publicly published business contact — a company website, a chamber-of-commerce directory, or a similar public listing. We do not scrape LinkedIn or Reddit, we do not buy consumer lists, and we do not guess or pattern-generate addresses.
What you can do:
- Commercial outreach must include an opt-out route and a valid postal address. You can also reply “no thanks” or email [email protected] to stop future outreach.
- Unsubscribing is permanent. Your address goes on a suppression list that survives every future campaign and every new list we build. We do not "re-engage" people who said no.
- If you request deletion, we remove the outreach profile while retaining the minimum suppression record needed to honour your opt-out.
We only send to US business addresses in English. Korea requires prior consent for commercial email, so we do not cold-email Korean addresses at all.
5. Who else touches the data
We use a small number of vendors, each for one job, each bound by its own agreement with us:
- Polar and Gumroad — checkout, receipts, file delivery and, on Gumroad, affiliate attribution and payouts.
- Google Workspace — our email.
- Cloudflare — domains, DNS, hosting, security and aggregate Web Analytics.
- Calendly — optional setup-call booking.
- Instantly — sending and managing the cold-outreach campaigns described in section 4.
- Notion — two jobs: it hosts the product template you duplicate (duplicating it does not tell us anything about you), and it runs our cohort intake form, whose responses land in our own private Notion workspace.
We add vendors reluctantly. If this list grows, this page changes on the same day.
6. How long we keep things
- Order records: for applicable tax, accounting and legal recordkeeping obligations. We explain any retention restriction when responding to a deletion request.
- Your email on the updates list: until you unsubscribe or ask us to delete it.
- Support threads: up to two years, then deleted.
- Cohort intake answers: for the cohort study and its report. Access is limited to the two founders, and nothing identifying you is published without your written permission.
- Suppression list: forever, by design — it is the only way "never contact me again" can actually mean never.
7. Your rights
Wherever you live, one email to [email protected] gets you: a copy of everything we hold on you, a correction, or deletion. No form, no identity-verification theatre beyond confirming you control the address. We aim to answer within 2 business days and will not take longer than 30.
If you are in the EU or UK, our lawful bases are contract (delivering what you bought), legitimate interest (B2B outreach and running the business), and consent where you gave it. You may object or withdraw consent at any time, and you may complain to your local data protection authority.
If you are in California, you have the right to know, delete, correct, and opt out of sale or sharing. There is nothing to opt out of, because we do not sell or share personal information, and we never discriminate against anyone for exercising a right.
8. Security, stated honestly
Our operational records live in the vendor systems listed above. Access is limited to running the product and providing support. We do not store card numbers or AI account passwords. Please redact business material you send for support; any material deliberately shared for setup is handled within the agreed scope.
We are two people. We are not going to claim a certification we do not have. The strongest security control here is that we collect very little in the first place. If a breach ever affected your data, we would tell you directly and put it in the public ledger, because a record that only shows good news is not a record.
9. Children
This is a product for people running companies. It is not directed at anyone under 16, and we do not knowingly collect their information.
10. Changes to this page
If what we collect changes, this page changes on the same day, and the change is dated in the public ledger. The September 6 revision corrects the earlier no-analytics statement and includes Gumroad, Calendly, the free review, and voluntarily shared support data.
11. Contact
GENIC FILM LLC, Los Angeles, California. Email: [email protected]. A postal address for privacy notices is available on request.