Privacy Policy

Trust the Process (“we”, “us”, “our”) is a conversation series, a library of practical resources, and a membership. This policy explains what personal information we collect through this website, our podcast, our AI-guided resources and the TTP Pro membership, why we collect it, and what you can ask us to do with it.

Trust the Process is a brand name. The operator’s registered business name, registered address and the jurisdiction whose laws govern our relationship with you are available on request at trusttheprocesswithshaan@gmail.com. That address is also how you reach us about anything in this policy.

We keep the collection narrow: what we need to run the Service and answer you.

• Account information: your name, email address, and the sign-in method you choose (email and password, or Google sign-in). Passwords are handled by our authentication provider and are never visible to us.
• Email updates: your first name and email address when you subscribe to The Process, and whether you have unsubscribed.
• Messages you send us: when you contact us or ask for a financial conversation, we receive your name, email, phone number, country, city, residency status, the topic you need help with, your message, and your consent to be contacted.
• AI resource activity: the answers you give inside an assessment, the assessment we generate for you, any action plan, tasks and milestones you create, and your progress against them. We store these so your history and plans are there when you come back.
• Membership information: whether your plan is Free or Pro, your subscription status, the last four digits of the card used, your billing country, and the identifiers Stripe uses for your customer and subscription records.
• Technical information collected automatically: IP address, approximate location derived from that address, device and browser type, referring page, pages viewed, and the analytics events we record (for example that a Pro page was viewed or an assessment was opened).

We do not receive or store your full card number. We do not ask for government identification numbers, and we do not knowingly collect health information, precise device location, or any special category of personal data. Please do not type sensitive information of that kind into an AI resource or a message to us.

• To create and secure your account, sign you in, and keep your saved assessments, plans and progress available to you.
• To send the weekly email you asked for, and other messages you request, such as an answer to a meeting request. Every marketing email has a one-click unsubscribe, and unsubscribing never closes your account.
• To generate AI assessments, explanations, action plans and recommendations you ask for.
• To take payment for TTP Pro, keep your subscription running, and handle cancellations and billing questions.
• To understand how the site is used, so we can fix what is broken and decide what to build next. This is done with aggregated analytics events rather than advertising profiles.
• To answer your questions, honour your privacy choices, and meet our legal, tax and accounting obligations.
• To detect and prevent abuse, fraud, scraping and attempts to break into the Service.

We do not use your personal information for automated decisions that have a legal or similarly significant effect on you, and we do not use it to train third-party advertising models.

Where data protection law requires us to identify a legal basis (for example in the EEA, the UK and Switzerland), we rely on the following: performance of a contract for the account, membership and anything you ask us to produce for you; your consent for the weekly email and for AI processing of anything you enter beyond what is needed to deliver a result to you; our legitimate interests in keeping the Service secure, understanding its use and improving it, balanced against your rights; and compliance with a legal obligation for tax, accounting and lawful requests.

We use the minimum needed to keep the Service working. Signing in sets a session token that keeps you logged in and is stored by your browser. We also store small preference values locally, such as remembering that you dismissed something on the page.

We do not run advertising networks, we do not set cross-site tracking cookies, and we do not sell audiences to anyone. We record first-party analytics events (for example “an assessment was opened”) so we can see which resources help people and which do not.

Podcast episodes are played through YouTube. YouTube may set its own cookies or identifiers when a player loads or a video plays, governed by Google’s privacy policy rather than ours. You can block or clear cookies in your browser settings at any time; blocking the session token will sign you out, and blocking third-party cookies may affect embedded players.

Many resources are AI-guided. When you use one, the answers you enter are sent to the AI model providers we use through our platform, together with the instructions that shape the assessment, so that a result can be produced for you. The result is saved to your account so your plan and history remain available.

AI output can be incomplete or wrong, and it is not financial, tax, legal, immigration, medical or investment advice. Review anything important with a licensed professional before you act on it. Because your inputs may be processed by providers outside your country, please leave out sensitive details such as account numbers, identification numbers, or medical information.

TTP Pro is billed through Stripe. Your card details are entered on Stripe’s checkout page and are handled by Stripe under its own privacy policy; we receive only the subscription status, plan, the last four digits of the card, the billing country and your email so we can run and support your membership.

We keep records of what was charged, when, and for which period, because tax and accounting law requires it. You can open Stripe’s customer portal from My Process to update a payment method or cancel.

We share personal information only with the providers that make the Service work, and only as needed:

• Our application platform, which provides hosting, the database, authentication, file storage and email delivery for this site.
• Stripe, for payments, subscriptions, invoices and the billing portal.
• AI model providers, to generate the assessment, plan or explanation you asked for.
• YouTube and Instagram, when you play or follow embedded content; those services see the request from your browser.
• Google, if you choose Google sign-in or connect a Google account for scheduling.
• Professional advisers and authorities, where we are required by law to disclose information, or where disclosure is necessary to establish, exercise or defend a legal claim.

We do not sell personal information, we do not rent our email list, and we do not share personal information for cross-context behavioural advertising. If the Service is ever sold or merged into another business, information may transfer as part of that transaction, and this policy would continue to apply until a new one is published.

We and our providers operate in several countries, including the United States and Canada. Information may therefore be processed outside the country where you live, where privacy laws may differ. Where required, transfers rely on recognised safeguards such as standard contractual clauses and the providers’ data processing terms. You can ask us which safeguards apply to your information.

• Account, assessment history, action plans and progress: while your account is open, then for up to 30 days after you ask us to delete it, so the deletion can be completed across backups.
• Email subscription: until you unsubscribe, after which we keep only your address on a suppression list so we do not contact you again.
• Meeting and contact requests: up to 24 months after our last exchange, in case you come back to us.
• Billing and tax records: up to 7 years, as accounting and tax law requires.
• Analytics events: up to 26 months in aggregated or de-identified form.
• Anything we must keep for a legal claim or a lawful request: for as long as that obligation lasts.

Traffic to the Service is encrypted in transit, access to the database is restricted to the administrative accounts that need it, and payment details never reach our servers. No system is perfect, so we cannot promise absolute security. If a breach affects your personal information and the law requires us to tell you, we will notify you and the relevant regulator without undue delay.

Depending on where you live, you may have some or all of these rights over your personal information: to be told what we hold and why, to receive a copy, to have it corrected, to have it deleted, to restrict or object to certain uses, to receive it in a portable format, and to withdraw consent at any time where consent is our basis.

You can exercise any of these by emailing trusttheprocesswithshaan@gmail.com. You can unsubscribe from the weekly email with the link in any message, and you can ask us to close your account and delete your saved assessments and plans. We answer requests within 30 days or the shorter period your local law sets, and we may need to confirm your identity first. We will not discriminate against you for exercising a privacy right, and we do not charge a fee except where the law allows it for manifestly unfounded or repetitive requests.

The Service is written for adults building a life and a business, and it is not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not create advertising or interest profiles of minors. If you believe a child has given us personal information, write to us and we will delete it.

We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. We collect, use and disclose personal information only for the purposes described in this policy, and we rely on your consent, which may be express or implied depending on the sensitivity of the information.

If we ever experience a confidentiality incident presenting a risk of serious injury, we notify the Office of the Privacy Commissioner of Canada, and in Quebec the Commission, as well as affected individuals, as required by law.

If you are in the European Economic Area, the United Kingdom or Switzerland, we act as the controller of your personal information and the General Data Protection Regulation, the UK GDPR or the Swiss Federal Act on Data Protection applies, together with this policy. Where a specific Swiss rule differs from the general policy, the Swiss rule applies to you.

If you live in a state with a comprehensive privacy law, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont and Virginia, the following applies to you. California residents should also read the California notice below.

The Lei Geral de Proteção de Dados (LGPD) applies to you. We process personal data on the legal bases of performing a contract with you, your consent, our legitimate interests, and compliance with legal obligations.

• You may confirm whether we process your data, access it, correct it, anonymise, block or delete unnecessary or excessive data, request portability, and request deletion of data processed with your consent.
• You may request information about the entities with which we share your data, and about the possibility of refusing consent and the consequences of that refusal.
• You may revoke consent at any time, and you may petition the Autoridade Nacional de Proteção de Dados (ANPD) about your data.
• Our contact for data protection matters in Brazil is trusttheprocesswithshaan@gmail.com.

If you are in Australia, the Privacy Act 1988 and the Australian Privacy Principles apply, and nothing in this policy or our Terms limits the consumer guarantees under the Australian Consumer Law. If you are in New Zealand, the Privacy Act 2020 applies.

• We collect your personal information from you, and only for the purposes described in this policy.
• You may ask for access to the personal information we hold about you, and for correction of it. We respond within 30 days.
• We do not disclose personal information to overseas recipients except to the service providers named in this policy, which may be located outside Australia and New Zealand.
• If you think we have breached the Australian Privacy Principles, contact us first so we can try to resolve it. You may also complain to the Office of the Australian Information Commissioner, or in New Zealand to the Office of the Privacy Commissioner.
• We do not collect government-related identifiers, and we do not use your information for direct marketing unless you asked for it or would reasonably expect it; every message allows you to opt out.

Wherever you are, we apply the protections in this policy. If the law of your country gives you rights this policy does not describe, those rights still apply to you, and you can exercise them by writing to trusttheprocesswithshaan@gmail.com. If a mandatory local rule conflicts with a term of this policy or of our Terms of Use, the local rule prevails to the extent of the conflict.

We may update this policy when the Service changes or the law requires it. The revised version is published on this page with a new date. If a change materially affects how we use your personal information, we will tell account holders by email before it takes effect. Continuing to use the Service after that means the new policy applies.

Questions about this policy, or a request about your information: trusttheprocesswithshaan@gmail.com. We answer every message.