Privacy policy

We collect information you give us directly — your name, email, company, role, and the answers you submit on forms (booking, questionnaire, free-roadmap). For active customers, we additionally process operational data inside the systems we integrate (HubSpot, NetSuite, etc.) under the scope of the engagement.

We also collect basic usage data automatically: pages viewed, referring URL, device type, and IP-derived approximate location. We do not buy or rent third-party data about you.

Your information powers the discovery call (we use your questionnaire answers to prep), the AI roadmap we send you, ongoing communication about your engagement, and product analytics to improve the site.

We use Anthropic Claude to generate personalized roadmap content from your questionnaire answers. Anthropic processes the data per their commercial terms and does not train models on it.

We share data only with the service providers we depend on: Supabase (database), Resend (email), Anthropic (AI generation), Google Calendar (call invites), Stripe (billing for engaged customers). We don't sell or rent your data, ever.

We use Vercel Analytics for aggregate page-view analytics. No advertising cookies, no third-party trackers, no behavioral profiling. The customer portal uses signed, time-limited URLs (HMAC, 90-day TTL) — not cookies — for access.

You can request deletion or a copy of any information we hold about you by emailing jon@30dayramp.com. We honor requests within 7 business days.

All connections are encrypted in transit (HSTS, TLS 1.2+). Customer data lives in Supabase Postgres with row-level security. Admin tools are gated behind a bearer token and audit-logged. Sensitive secrets are scoped to the serverless functions that need them.

Questions about this policy? Email jon@30dayramp.com. We read everything.