Privacy Policy

This policy explains what information this site collects when you use it, why it is collected, who it is shared with, and the choices you have. The site is operated by Andrew Gooding (“I”, “me”). Questions go to andrew@andrewgooding.com.

What I collect

I only collect what a feature needs to work. There is no account system and no advertising tracking.

• Contact form. Your name, email address, and the message you write. Used solely to reply to you.
• Newsletter. Your email address, stored so I can send occasional updates. You can unsubscribe at any time.
• AI Opportunity Scanner. The company URL and the pain point you enter, plus your email address if you unlock the full report. The URL and pain point are sent to the AI provider to generate your report; your email is added to my contact list and used to follow up.
• Booking. When you book a session, the booking provider collects your name, email, scheduling details, and your answers to the short intake questions.
• Usage analytics. Aggregate, privacy-minded product analytics — pages viewed, button clicks, approximate region, device and browser type. Used to understand what is useful and improve the site.
• Abuse prevention. To rate-limit the scanner and prevent abuse, a short-lived record derived from your IP address is stored for up to 24 hours, then expires.

Who processes your data

I use a small set of reputable service providers (sub-processors). They process data on my behalf under their own privacy terms:

• Vercel — hosting and cookieless web analytics.
• PostHog — product analytics.
• Resend — sending the contact email and storing newsletter / scanner contacts.
• Cal.com — scheduling and the booking intake form.
• Anthropic — the AI model that generates scanner reports from the URL and pain point you submit.
• Upstash — temporary storage for scanner rate-limiting.
• Google Forms — the optional consultation request form. If you choose to open it from a scanner report, your business name, the highlighted opportunity, and the email you provided are passed along to prefill it.

I do not sell your personal information, and I do not share it with anyone other than the providers above.

Legal bases (EEA/UK)

Where the GDPR applies, I rely on: your consent for the newsletter; legitimate interests for replying to enquiries, securing the site, and understanding usage; and performance of a contract when you book or run the scanner.

How long it is kept

• Contact messages: kept while I handle your enquiry and for reasonable business records.
• Newsletter: until you unsubscribe.
• Scanner rate-limit records: up to 24 hours, then deleted automatically.
• Analytics: retained according to Vercel’s and PostHog’s retention settings.

Cookies

Vercel Analytics is cookieless. PostHog may set first-party cookies to measure usage. The site does not use third-party advertising or cross-site tracking cookies.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email andrew@andrewgooding.com and I will respond within a reasonable time. You can unsubscribe from emails using the link in any message.

International transfers

My providers are based in the United States, so your data may be processed there. They maintain their own safeguards for international transfers.

Children

This site is for businesses and is not directed to children, and I do not knowingly collect data from anyone under 16.

Security

The site is served over HTTPS with strict security headers, and API keys are kept server-side and never exposed to your browser. No method of transmission is perfectly secure, but I take reasonable steps to protect your information.

Changes

I may update this policy as the site evolves. The “last updated” date above reflects the latest version.