DRAFT · pending attorney review
Privacy Policy
Effective [EFFECTIVE DATE] · Last updated November 5, 2026
What we collect
Your first name, email and (optional) phone when you fill in a form.
Questions you type into Sam I Am and its answers, stored with a session ID and a one-way hash of your IP address, never the IP itself.
Cookieless analytics (pages viewed, referrer, country, device type).
Attribution data: the campaign tags (UTM), referring site and landing page from your first visit.
If you buy the course: purchase records from Stripe. We never see your full card number.
We do not collect tax documents, SSNs or account numbers, and we automatically remove them if typed into the chat.
Why
To send what you asked for, run the course, improve the content, prevent abuse, and understand which channels bring people here.
Who processes it
Vercel (hosting and analytics), Supabase (database), Resend (email), Anthropic (Sam I Am answers), OpenAI (transcribing Sam's own recordings), Stripe (payments), Google Workspace (email and meetings), Cloudflare (bot checks). Each processes data only to provide its service.
We don't sell your data
We don't sell or share personal information for advertising. There are no ad pixels on this site.
How long we keep it
Chat logs: [DECIDE: 90] days. Newsletter contacts: until you unsubscribe plus a suppression record so we don't email you again. Purchase records: as long as tax law requires.
Your choices
Email privacy@zencfo.io to access, correct or delete your information. Unsubscribe from any email with one click.
Security
Encryption in transit, role-based access with multi-factor login for administrators, and row-level access rules in our database.
Children
This site isn't for anyone under 18. We don't knowingly collect information from children under 13.
Changes
We'll update the date above and, for material changes, tell subscribers by email.
Questions? Email hello@zencfo.io (privacy requests: privacy@zencfo.io).