Privacy Policy
This Privacy Policy describes what information the Enrich Global Collective collects, how it is used, and the choices you have. We have designed the platform to collect as little data as possible.
1. What we collect
We collect only what is required to operate your membership:
- Your email address. Used to send you magic-link login emails and the monthly note. It is associated with your Stripe subscription record.
- Payment information, indirectly. Stripe processes your subscription payment. We never see or store your card number, CVV, or full payment details. We see only what Stripe reports back to us: subscription status, customer ID, and the email associated with the account.
- Subscription metadata. Your subscription status, plan, and renewal date.
- A first name and an email, if you take an assessment. Asked before the first question, never after the result. We also record which door you came through, so we know what to build next, and we record it as a code rather than a name. That means the subject you chose is not written next to your address. We use your address to write to you occasionally about new rooms and tools, and every message carries an unsubscribe link.
We ask again once every six months. After you have given a first name and an email you are not asked again for a hundred and eighty days, however many assessments you open in that time. Then the question comes back once. It is not a second toll and nothing is ever held back behind it. It is there so an address that has gone stale can be corrected, and so that we ask your permission again rather than assume it runs forever.
We count the days you come back, not the pages you open. A return is counted once per calendar day, so the list can say how often someone comes back without ever learning what they came back to.
The two records never join. The mailing list holds your first name, your email, a code for the door you arrived through, the date you first arrived, the date we last saw you, and the count of days you have returned. Separately, we keep plain counters of how often each pattern comes up, shaped like "the-shape-you-took, pattern three: 47". Those counters hold no name, no email, no session and no timestamp, so even someone holding both records could not say what any named person scored. This is what lets us say, literally, that we hold nothing about you.
2. What we do not collect or store on our servers
- Your chat conversations. Your conversations with the micro-companions are stored only on your device, in your browser's localStorage. They are not transmitted to or saved on our servers. The chat content is sent to the AI provider in real time to generate a response, but neither we nor the AI provider retain the conversation history server-side.
- Your anchor person details, capacity check-ins, and disclaimer acknowledgments. All stored on your device only.
- Your assessment answers, and your reading. Every answer you give and every result you receive is held in your own browser. Your answers are sent to our reader only in order to score them and hand back your reading, and no answer, score or result is stored on our side or attached to your email.
- Behavioral tracking. We do not use third-party advertising trackers, pixels, or behavioral analytics.
3. Third parties
We share data only with the providers required to operate the service:
- Stripe processes subscription payments. See Stripe's Privacy Policy.
- Anthropic provides the AI model used by the companion chat. Conversation content is transmitted to Anthropic to generate each response, then discarded. See Anthropic's Privacy Policy.
- Netlify hosts the website and serverless functions. See Netlify's Privacy Policy.
- Email provider sends magic-link and welcome emails. We use the minimum identifying data required to deliver email.
We do not sell, rent, or share your personal data with any other third party.
4. Cookies
We use one cookie, called egc_session, which contains your signed session token. It is required for you to remain logged in. We do not use tracking, advertising, or analytics cookies.
5. Your choices
- You can clear all local chat history and other on-device data at any time from your account page.
- You can sign out at any time. Signing out invalidates the local session cookie on that device.
- You can cancel your subscription at any time from the Stripe Customer Portal.
- You can request deletion of your account record by emailing hello@enrichglobalcollective.com. We will delete your email association within 30 days, retaining only what is required for tax or legal compliance.
6. Children
This service is for adults aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has subscribed, please contact us and we will close the account.
7. Security
We use HTTPS for all traffic, HMAC-signed session tokens, and standard industry practices. No system is perfectly secure; we encourage you to use a strong unique password if you use one to access your email.
8. International users
The Collective is operated from the United States. If you access the service from outside the United States, your information may be transferred to, processed in, and stored in the United States. By using the service, you consent to this transfer.
9. Changes to this policy
We may update this Privacy Policy. Material changes will be communicated by email to active subscribers.
10. Contact
Privacy questions: hello@enrichglobalcollective.com