Privacy Policy

Last updated: 2026-05-19

a7t.ai is operated by Leonardo Cardoso. This page explains what data we collect, why, and what your rights are. We aim for the minimum needed to run the site, the consultancy, and the booklet store.

What we collect

  • Analytics, PostHog. When you accept cookies, we load PostHog (EU-hosted) to count page views and understand how the site is used. We do not sell this data. If you decline, no analytics scripts load at all.
  • Booking, Cal.com. If you book a consultancy call, Cal.com processes your name, email, and time zone. Their privacy policy applies.
  • Email list. If you submit your email to receive the free 1-pager or notifications about new booklets, we store your email and language preference in the EU. Legal basis: your consent, confirmed via a click in a confirmation email. You can unsubscribe in one click via the link in every email; on unsubscribe the record is kept inactive so the same address cannot be silently re-added later. Email the operator for full deletion.
  • Transactional email, Resend. Confirmation, welcome, and delivery emails are sent through Resend. They process your email address solely to deliver the message.
  • Booklet delivery. Master files and per-purchase watermarked copies are stored in the EU. Your watermarked copy bears your email and order ID and is linked from the delivery email; the link stays valid as long as the file exists.
  • Purchases, Polar. If you buy a booklet, Polar.sh is the merchant of record and handles payment + invoice. We receive only the purchase event (product, amount, your email) so we can deliver the watermarked copy. Polar’s privacy policy applies to the payment data.
  • Site infrastructure, Cloudflare. The site is hosted on Cloudflare. They log request IPs for caching and abuse prevention, and run the captcha that protects the subscribe form.
  • Fonts. Loaded from Google Fonts and Fontshare. Both CDNs see your IP address.

We do not run ads. We do not embed third-party trackers beyond what is listed above.

Your rights (GDPR / LGPD)

Email [email protected] to access, correct, or delete your data. We respond within 30 days. Unsubscribing only marks the record inactive; mention “delete my data” in the email for full deletion. You can also complain to your local data-protection authority; in Germany, that’s the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Cookies

We remember your analytics choice locally in your browser. If you accepted, PostHog sets its own cookies; if not, nothing else is set. Polar’s checkout (a separate domain) may set its own cookies under its cookie policy.

Contact

Leonardo Cardoso · [email protected]