What we collect
- Email address — when you subscribe (free or paid).
- IP address & user agent — logged at signup for abuse prevention.
- Source tag — which page you signed up from (e.g. "landing").
- For paid subscribers: Stripe customer ID, subscription ID, tier, status, and renewal date. Card details are handled by Stripe; we never see or store them.
- Email engagement — when you open or click links in our emails (via Resend), to know what's useful.
Why we collect it
- To deliver the weekly insight and the full framework you paid for.
- To process payments and renewals via Stripe.
- To prevent fraud and abuse (spam signups, brute-force logins).
- To improve content based on what readers engage with.
Who we share with
We don't sell your email or share it with any other party.
How long we keep it
- Subscriber records — until you unsubscribe, then we keep a hash for 90 days to prevent re-spamming you.
- Paid subscription history — 7 years for tax/accounting compliance.
- Magic-link tokens — automatically deleted 30 days after use or expiry.
- Email send logs — 2 years for engagement analysis, then purged.
Your rights
- Unsubscribe — every email has a one-click link.
- Access / export — email [email protected] and we'll send your data within 30 days.
- Delete — same channel; we'll purge within 30 days (except records we're required to keep by law).
Cookies
We use one cookie: sg_session — a signed session token for logged-in paid users. HttpOnly, Secure, SameSite=Lax, 30-day expiry. We don't use third-party tracking cookies.
Children
This is a business tool for adults running businesses. We don't knowingly collect data from anyone under 16.
Changes
If this policy changes materially, we'll email you before the changes take effect.
Contact
Kevin Wong — [email protected]