PRIVACY POLICY FOR THE DIGITAL PRODUCT “CLARITY NAVIGATOR” — ENGLISH VERSION
Этот документ также доступен на русском языке: Политика конфиденциальности →
This English version is provided for international, administrative, payment, and reference purposes. For purchases made through the Russian-language purchase page, the Russian version applies unless otherwise expressly stated on the relevant purchase page.
Last updated: 01.06.26
Document version: 1.0
Website: loralansky.com
Applicable version: Russian, unless otherwise expressly stated on the relevant purchase page
This Privacy Policy (the “Policy”) explains what personal data is collected, used, stored, and transferred in connection with the website loralansky.com, the digital product “Clarity Navigator,” the AI Mirror form, the “Clarity Map,” purchase, access to materials, service email messages, support, and related technical services.
We strive to collect and use only the data necessary for purchase, provision of access, operation of the Product, generation of a personalized result, sending service messages, User support, security, compliance with legal obligations, and protection of the Author’s legitimate interests.
If you do not agree with this Policy, do not purchase or use the Product.
1. Who Is Responsible for Data Processing
1.1. Data Controller / Database Owner: Lora Lansky, registered in the State of Israel as an Osek Patur, registration number: 328667803.
1.2. Address for legal notices: Ashkelon, Israel. The full mailing address may be provided upon a justified legal request through the indicated contact email, where necessary and permitted by applicable law.
1.3. Website: loralansky.com.
1.4. Email for privacy matters: info@loralansky.com.
1.5. Support email: support@loralansky.com.
1.6. Email for legal matters: admin@loralansky.com.
1.7. For the purposes of this Policy, the words “we,” “us,” and “Author” mean Lora Lansky as the provider of the digital product and the data controller, unless expressly stated otherwise.
2. Services Covered by this Policy
2.1. This Policy applies to:
the website loralansky.com;
the digital product “Clarity Navigator”;
the AI Mirror form / form for generating a personalized result;
the “Clarity Map” and other personalized materials;
the digital Product space, if used;
service email communications related to purchase, access, support, and completion of the Product;
technical data necessary for security, access, proof of purchase, and support;
cookies and similar technologies, if used on the website.
2.2. This Policy does not govern third-party websites, services, and platforms that have their own privacy policies, including Merchant of Record, payment providers, AI providers, hosting providers, email services, form services, automation services, databases, visual generators, and other third-party platforms.
2.3. If the User proceeds to a third-party website, checkout page, or interface, the processing of data by that third party is governed by its own terms and policies.
3. What Data We May Collect
3.1. Purchase and access data:
name, if provided during purchase, registration, or within the Product;
email;
order number;
date and time of purchase;
selected product;
payment status;
information about provision of access;
access period;
fact of downloading materials or generating a result, if such recording is technically available.
3.2. Payment data:
We do not process or store bank card details. The payment part of the purchase may be processed by Lemon Squeezy or another Merchant of Record / payment operator. We may receive limited information from the payment service that is necessary to confirm the purchase, provide access, offer support, process a refund, or handle a disputed transaction.
3.3. Data that the User enters into Product forms:
answers in the AI Mirror form;
answers in digital module forms;
text comments, if provided within the Product;
data voluntarily entered by the User for the generation of the “Clarity Map” or other personalized materials.
3.4. AI results and personalized materials:
AI Mirror;
“Clarity Map”;
other personalized texts created on the basis of the User’s answers and the Author’s Product structure.
3.5. Data for the visual version of the “Clarity Map”:
To create the visual version of the “Clarity Map,” the name selected or changed by the User within the course, the date, and the personalized AI result created on the basis of the User’s answers may be used. The User understands that the visual map contains the personalized text and displayed name used to create the final material.
3.6. Support data:
email and name, if provided;
content of the request;
screenshots, if sent by the User;
information about a technical error;
support correspondence;
date and status of the request.
3.7. Technical data:
IP address;
approximate location by IP, if technically processed;
device type;
browser;
operating system;
date and time of visit;
page URL;
technical access logs;
data about failures, errors, security, and attempts at unauthorized access.
3.8. Automation and integration data:
We may process technical data necessary to transfer information between services through Make and to run the Product’s automated scenarios. The detailed technical scheme is set out in Section 8 of this Policy.
3.9. Email communication data:
email;
date an email was sent;
technical delivery status;
bounce / non-delivery of an email;
content of the service email;
consent to or refusal of marketing communications, if applicable.
3.10. Cookies and similar technologies:
The website may use strictly necessary cookies for the operation of the website, purchase, security, user account, and provision of the Product. If analytics, advertising, retargeting, or other optional cookies are used in the future, their use will be governed by the Cookie Policy and, where required by law, by separate User consent.
4. Data We Do Not Ask You to Enter
4.1. The Product is not intended for entering:
medical diagnoses;
information about treatment, therapy, medication, or medical history;
bank card details;
passwords;
government identification numbers;
passport details;
data of third parties;
information about children;
exact residential address;
other sensitive information that is not necessary for the operation of the Product.
4.2. The User is not required to disclose personal, intimate, medical, family, financial, or other sensitive information in order to use the Product.
4.3. The AI Mirror form is a mandatory stage of the user path, but the User may complete it briefly, neutrally, minimally, or without disclosing personal details. At the same time, the quality, depth, and personalization of the AI result may depend on the completeness and specificity of the answers.
4.4. If the User voluntarily enters personal or sensitive information despite the warning not to transmit such data, we process it only to the minimum extent necessary to provide the Product, generate the result, offer support, ensure security, or comply with legal obligations.
4.5. We do not create medical, psychological, psychiatric, legal, financial, or other professional assessments on the basis of the User’s answers.
5. Purposes for Which We Use Data
We may use personal data for the following purposes:
5.1. Purchase and provision of access:
confirming the purchase;
creating or activating access;
sending links, instructions, and materials;
verifying the access period;
managing access to the Product.
5.2. Provision of the Product:
operation of digital forms;
generation of the AI Mirror;
creation of the “Clarity Map”;
creation of the visual version of the “Clarity Map”;
opening subsequent modules;
storing or displaying the result, if provided by the technical logic of the Product.
5.3. User support:
answering questions;
restoring access;
correcting errors;
verifying the order;
handling complaints and technical requests.
5.4. Security and protection of the Product:
fraud prevention;
protection against unauthorized access;
prevention of circumvention of restrictions;
protection of intellectual property;
investigation of violations of the Terms of Use;
prevention of prompt injection, abuse, harmful requests, or violations of AI provider rules.
5.5. Legal, accounting, and tax obligations:
confirming the purchase;
fulfilling tax, accounting, and reporting obligations;
preparing financial statements;
processing refund requests, chargebacks, or disputes;
complying with requirements of law, court, regulator, payment operator, or Merchant of Record.
5.6. Communications related to the Product:
service emails;
access instructions;
course messages;
sending the result or a link to the result;
notices about technical changes;
notices about the access period;
support replies;
important messages about security or legal changes.
5.7. Marketing communications:
We send marketing emails, news, offers, or promotional messages only where we have an appropriate basis under applicable law, including separate consent where required. The User may unsubscribe from marketing communications at any time.
5.8. Analytics and website improvement:
As of the last update of this Policy, optional analytics or advertising tracking tools are not used within the Product. If such tools are added in the future, information about them will be added to the Cookie Policy or cookie banner, where required by applicable law.
6. Legal Bases for Processing Data
If GDPR, UK GDPR, or similar data protection laws apply to the processing, we rely on the following legal bases:
6.1. Performance of a contract:
We process data necessary for purchase, provision of access, operation of the Product, generation of the AI Mirror, creation of the “Clarity Map,” creation of the visual version of the result, sending service emails, support, and performance of the Terms of Use.
6.2. Legitimate interests:
We may process data to protect the website, prevent fraud, ensure security, protect intellectual property, analyze technical errors, prevent abuse, handle justified claims, and improve the service, provided that such interests are not overridden by the User’s rights and freedoms.
6.3. Legal obligation:
We may process and retain data where necessary to comply with tax, accounting, legal, regulatory, or other mandatory requirements.
6.4. Consent:
We rely on consent where required by law, for example for optional cookies, marketing communications, certain types of analytics, or other processing that is not necessary for providing the Product.
6.5. Special categories of data and sensitive information:
The Product is not intended to collect special categories of personal data, including health data, medical diagnoses, information about treatment, biometric data, data concerning political opinions, religious beliefs, sex life, or other sensitive information.
If the User voluntarily enters such information into free-text fields, the User does so on their own initiative, despite the warning not to transmit such data. We process such information only to the minimum extent necessary to provide the Product, generate the result, offer support, ensure security, or comply with legal obligations.
If applicable law requires separate explicit consent for the processing of such data, we request such consent before the relevant processing or restrict, delete, or do not process such data where technically and legally possible.
6.6. Vital interests:
The Product is not an emergency service. However, if in a rare situation processing data is necessary to protect a person’s vital interests and this is provided for by law, we may act within the limits of applicable law.
7. AI Function and Transfer of Data to the AI Provider
7.1. Certain Product functions, including the AI Mirror and the “Clarity Map,” are created using artificial intelligence.
7.2. To generate a personalized result, the User’s text answers are transferred through Make to Anthropic API, which is used as a commercial API via an API key. Anthropic API receives the User’s text answers and the technical context necessary to generate the AI Mirror / “Clarity Map.”
7.3. Data processing by Anthropic API is governed by Anthropic’s commercial terms, Data Processing Addendum, Standard Contractual Clauses, and other applicable Anthropic documents. According to Anthropic’s current terms and documentation as of the last update of this Policy, inputs/outputs from Anthropic API are not used by default to train models unless the customer specifically chooses otherwise or provides feedback / a bug report.
7.4. We do not use Users’ answers to train our own AI models. We also do not transfer Users’ answers to Anthropic API for the purpose of training Anthropic models.
7.5. We do not sell Users’ answers and do not publish them without the User’s separate explicit consent, except where provided by law or necessary to protect the Author’s rights.
7.6. The AI result may be inaccurate, incomplete, generalized, or may fail to take into account the User’s full personal context. It is not professional advice, a diagnosis, a personality assessment, or a recommendation to take any action.
7.7. The User must not enter into AI forms unlawful, harmful, discriminatory, violent, extremist, or fraudulent content, prompt injection, jailbreak commands, requests to circumvent restrictions, or materials that violate the rules of a third-party AI provider.
7.8. We may block, reject, not process, or delete requests where there are reasonable grounds to believe that they violate the Terms of Use, AI provider rules, Product security, third-party rights, or applicable law.
8. Third Parties and Service Providers
To provide the website and the Product, we use or may use third-party providers. The specific list of services depends on the actual technical configuration of the Product.
8.1. Merchant of Record / payment services:
Lemon Squeezy — processing of purchases, payments, taxes, order confirmations, refunds, chargeback procedures, and related payment data;
banks, payment systems, and other payment operators, if they participate in processing the transaction.
Lemon Squeezy and payment services may process data as independent controllers or in another role defined by their own terms and policies.
8.2. Forms:
Tally — collection of the User’s answers through the AI Mirror form or other digital forms.
Through Tally, the User’s answers, form submission data, and technical information necessary for the form to operate may be processed.
8.3. Automation and transfer of data between services:
Make — automation of data transfer between services.
Confirmed technical scheme of the Product: Tally collects form answers; Make retrieves the answers from Tally and transfers them further; Anthropic API receives the text answers to generate the AI Mirror / “Clarity Map”; Airtable stores data, answers, and the result; HTML/CSS to Image receives the name, date, and AI result to generate the visual version of the “Clarity Map”; SendGrid sends the User access emails, the result, course messages, and service emails.
Through Make, data necessary to perform the automated scenario may technically pass through, including email, order number, payment status, form answers, generation result, links, technical identifiers, and processing statuses.
8.4. AI provider:
Anthropic API — processing of the User’s text answers to generate the AI Mirror, the “Clarity Map,” or another personalized result.
Transferred data may include the User’s text answers and technical context necessary to generate the result. We do not use Users’ answers to train our own AI models.
8.5. Database / operational table:
Airtable — storage, structuring, or administration of data necessary to provide the Product.
Airtable may store email, order number, access status, form answers, links to results, technical statuses, information about Product progress, AI result, and other data necessary to administer the Product.
To improve security, we strive to restrict access to Airtable, grant access only to team members who need it for Product operation, and, where technically feasible, logically separate identifying data, such as email, from personal reflection texts / AI results.
8.6. Email delivery:
SendGrid — sending service emails, access emails, technical notices, support messages, progress status notices, results, or other email communications related to the Product.
Through SendGrid, the email address, name if used, content of the email, technical delivery status, and non-delivery status may be processed. We do not use open/click tracking in email messages unless otherwise expressly stated in this Policy or in a separate notice.
8.7. Generation of images and visual materials:
HTML/CSS to Image — generation of images, visual cards, PNG/JPG/WebP versions of the “Clarity Map,” or other visual materials from HTML/CSS.
To generate the visual version of the “Clarity Map,” the name selected by the User, the date, and the personalized AI result may be transferred to HTML/CSS to Image. We apply the principle of data minimization: when transferring data to the visual generation service, we strive not to transfer direct User identifiers such as email, payment data, or order number if they are not needed to create the image.
8.8. Hosting and technical infrastructure:
website hosting provider;
server infrastructure;
security services;
CDN, if used;
WordPress, WooCommerce, LMS, plugins, or other technical components of the website, if used.
8.9. Analytics and cookies:
As of the last update of this Policy, optional analytics or advertising tracking tools are not used within the Product. If such tools are added in the future, information about them will be added to the Cookie Policy or cookie banner, where required by applicable law.
8.10. Messengers and communication automation:
Telegram, ManyChat, or other chatbot and communication platforms are not used within the Product unless otherwise expressly stated on the website, in the Product interface, in this Policy, or in a separate notice. If such services are connected in the future and begin processing Users’ personal data, this Policy and, where necessary, the relevant notices or consents will be updated before such processing begins.
8.11. Professional advisers and reviewing authorities:
Data about purchases, payments, invoices, refunds, taxes, and transactions may be transferred to accountants, auditors, tax advisers, lawyers, government authorities, courts, regulators, or other authorized persons solely for the purposes of preparing financial reporting, complying with tax and legal obligations, handling disputes, and protecting the Author’s legitimate interests.
Users’ answers in AI Mirror forms, personal reflection texts, and AI results are not transferred to accountants or tax advisers unless required by law, court, regulator, or to protect the Author’s rights.
8.12. We strive to use providers that ensure a reasonable level of data protection. At the same time, such providers may process data in accordance with their own terms, privacy policies, data processing agreements, subprocessors lists, and applicable law.
8.13. The User understands that, for the digital product to operate, data may technically be transferred between the listed services. We strive to minimize the scope of transferred data and not to transfer sensitive information unless it is required to provide the Product or was voluntarily included by the User in their answers.
9. International Data Transfers
9.1. Because the website, Lemon Squeezy, Tally, Make, Anthropic API, Airtable, HTML/CSS to Image, SendGrid, hosting, email services, and other providers may be located in different countries or use international infrastructure, personal data may be transferred outside the User’s country of residence, including to Israel, the United States, the European Economic Area, the United Kingdom, and other jurisdictions.
9.2. The State of Israel has been recognized by the European Commission as a country providing an adequate level of protection for personal data for the purposes of data transfers from the European Economic Area with respect to automated processing of personal data, where such decision applies to the relevant transfer. This means that the transfer of personal data to the Controller in Israel may take place on the basis of the relevant adequacy decision, subject to its terms, limitations, and applicable law.
9.3. If the User’s data from the European Economic Area, the United Kingdom, or another jurisdiction with restrictions on international transfers is transferred to a country that is not recognized as providing an adequate level of protection, we use applicable legal mechanisms where required by law. Such mechanisms may include Standard Contractual Clauses, Data Processing Addendum, adequacy decisions, contractual measures, or other permitted mechanisms.
9.4. If Anthropic API is used as a commercial AI provider, the transfer and processing of data may be governed by Anthropic’s commercial terms, DPA, and Standard Contractual Clauses, where applicable.
9.5. The User understands that when using an international digital product, data may be processed by providers in different countries.
10. Data Retention Periods
10.1. We retain personal data only for as long as necessary for the purposes described in this Policy, unless longer retention is required by law, accounting obligations, tax rules, protection of rights, security, dispute handling, or the rules of third-party providers.
10.2. Purchase and order data may be retained for the period necessary for accounting, tax, legal, and evidentiary purposes.
10.3. Access data and technical logs may be retained for the period necessary to provide access, ensure security, prevent fraud, correct errors, and protect rights.
10.4. AI Mirror form answers, progress data, Airtable records, and AI results are stored for up to 12 months from the date of purchase or until deletion upon the User’s request, unless longer retention is required by law, accounting obligations, security, dispute handling, chargeback procedures, or protection of the Author’s rights.
After 12 months, such data is deleted or anonymized within a reasonable period, unless further retention is required for legal, accounting, technical, evidentiary purposes, dispute handling, chargeback procedures, or protection of the Author’s rights.
10.5. Visual versions of the “Clarity Map” created through HTML/CSS to Image or another visual generation service may be retained for the period necessary to provide the result to the User, for the Product access period, technical support, or deletion upon request, if deletion is technically available and does not conflict with legal obligations.
10.6. Support correspondence may be retained for the period necessary to process the request, confirm actions taken, prevent disputes, and protect rights.
10.7. Marketing data is retained until the User unsubscribes, withdraws consent, or the relevant communication is discontinued, unless longer retention is required to prove consent or comply with law.
10.8. Cookies are retained in accordance with the cookie type, browser settings, consent banner, and Cookie Policy.
10.9. We may delete or anonymize data earlier if it is no longer needed for the purposes of processing and there are no lawful grounds for further retention.
11. User Rights
Depending on the User’s country of residence and applicable law, the User may have the following rights:
11.1. the right to receive information about what data is processed;
11.2. the right to request access to their data;
11.3. the right to request correction of inaccurate data;
11.4. the right to request deletion of data;
11.5. the right to request restriction of processing;
11.6. the right to object to processing where processing is based on legitimate interests;
11.7. the right to data portability, where applicable;
11.8. the right to withdraw consent where processing is based on consent;
11.9. the right to opt out of marketing communications;
11.10. the right to lodge a complaint with a competent data protection authority.
11.11. These rights are not absolute. In some cases, we may refuse to comply with a request in whole or in part where permitted by applicable law, for example due to legal obligations, accounting retention, security, protection of rights, fraud prevention, chargeback disputes, technical impossibility, or rights of third parties.
12. How to Submit a Privacy Request
12.1. To exercise rights in relation to personal data, the User may write to: info@loralansky.com.
12.2. The request should preferably include:
name, if used;
purchase email;
order number, if available;
the substance of the request;
country of residence, if relevant for the application of law.
12.3. To protect data, we may request identity verification or additional information to ensure that the request was submitted by the User or an authorized person.
12.4. We respond to privacy requests without undue delay and, in any event, within one month from the date of receipt of the request, unless another period is provided by applicable law. As a general rule, we strive to respond no later than within 14 calendar days.
If the request is complex or if a large number of requests has been received, the response period may be extended by up to two additional months, where permitted by applicable law. In such case, we will inform the User of the extension and the reasons for the delay within the first month from the date of receipt of the request.
12.5. If the request concerns data processed by the Merchant of Record, payment operator, AI provider, or another third party as an independent controller, the User may need to contact that party directly. Where possible, we will provide the User with the information necessary for such contact.
13. Data Deletion and Consequences of Deletion
13.1. The User may request deletion of their personal data where such right is provided by applicable law.
13.2. Deletion of certain data may make it impossible to provide access to the Product, restore the result, confirm the purchase, provide support, handle a dispute, or perform other functions.
13.3. A data deletion request does not automatically entitle the User to a refund.
13.4. We may retain part of the data where necessary to comply with law, tax and accounting obligations, protect rights, prevent fraud, handle disputes, chargeback procedures, security, or prove performance of the contract.
13.5. If data has been transferred to third-party providers that process it on our behalf, we make reasonable efforts to notify such providers of the need to delete, restrict, or update the data within the limits of our contractual, technical, and legal capabilities.
13.6. If a third-party provider acts as an independent data controller, the User may need to contact that provider directly, but we will, where possible, provide the information necessary for such contact.
14. Data Security
14.1. We apply reasonable organizational and technical measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
14.2. Such measures may include access restrictions, use of secure services, passwords, website security settings, software updates, access control for administrative panels, and other measures.
14.3. Access to Airtable, Tally, Make, SendGrid, WordPress / LMS, and other services should be granted only to persons who need it to provide the Product, support, administration, technical maintenance, or compliance with legal obligations.
14.4. No method of transmitting data over the internet or storing data is completely secure. We cannot guarantee absolute security of data.
14.5. The User is responsible for the security of their device, email account, passwords, and access links.
14.6. The User must not transfer access links, logins, passwords, or downloaded materials to third parties.
15. Children and Minors
15.1. The Product is intended only for persons who are at least 18 years old.
15.2. We do not knowingly collect data from minors for purposes of using the Product.
15.3. If we become aware that the Product was purchased or is being used by a person under the age of 18, we may restrict access, delete the relevant data, and take other reasonable measures in accordance with the Terms of Use and applicable law.
15.4. If you believe that a minor has provided data to us, please contact us at info@loralansky.com.
16. Cookies and Similar Technologies
16.1. The website may use cookies and similar technologies.
16.2. Strictly necessary cookies may be used without separate consent if they are needed for the operation of the website, security, purchase, access, user account, or provision of the Product.
16.3. As of the last update of this Policy, optional analytics or advertising cookies are not used within the Product unless otherwise expressly stated on the website or in a separate cookie banner.
16.4. If analytics, advertising, retargeting, or other optional cookies are added in the future, they will be used only in accordance with applicable law and, where required, after obtaining the User’s consent.
16.5. The User can manage cookies through browser settings and, where available, through a cookie banner or consent settings on the website.
16.6. Detailed information about cookies, categories, retention periods, and management methods may be provided in a separate Cookie Policy.
17. Email Communications and Mailing Lists
17.1. We may send service emails related to purchase, access, access period, technical matters, security, changes to terms, support, course messages, and use of the Product.
17.2. Service emails are part of providing the Product and are not marketing communications.
17.3. Marketing emails, news, offers, invitations, and promotional messages are sent only where there is an appropriate legal basis, including consent where required by applicable law.
17.4. The User may unsubscribe from marketing communications using the unsubscribe link in the email or by writing to support@loralansky.com.
17.5. Opting out of marketing emails does not stop the User from receiving service messages necessary for providing the Product, security, access, legal notices, or order processing.
17.6. As of the last update of this Policy, we do not use open/click tracking in email messages unless otherwise expressly stated in this Policy or in a separate notice.
18. Automated Decision-Making and Profiling
18.1. The Product’s AI function creates a personalized text result based on the User’s answers.
18.2. The AI function is not used to make legally significant decisions about the User, deny services, assess health, financial situation, professional suitability, rights, obligations, risks, or other characteristics that could have legal or similarly significant effects.
18.3. The AI result is intended for personal reflection and is not a professional assessment.
19. Third-Party Data
19.1. The User must not enter personal data of third parties into the Product forms without their consent or another lawful basis.
19.2. If the User enters third-party data, the User is responsible for having a lawful basis for such transfer.
19.3. We may delete or not process third-party data where there are reasonable grounds to believe that it was transferred without consent, unlawfully, or in violation of this Policy and the Terms of Use.
20. Changes to this Policy
20.1. We may update this Policy from time to time.
20.2. For new users, the new version applies from the moment it is published on the website, unless a later effective date is specified in it.
20.3. If changes materially affect the User’s rights, methods of data processing, purposes of processing, categories of data, third parties, retention periods, or international transfers of data, we notify the User by email, through the Product interface, or by another reasonable method, where such notice is required by applicable law.
20.4. The User is advised to periodically check the current version of the Policy on the website.
21. Contacts
For privacy and personal data matters:
Email: info@loralansky.com
For access and technical support matters:
Email: support@loralansky.com
For legal matters:
Email: admin@loralansky.com
Website: loralansky.com
Author / Data Controller: Lora Lansky
Country of registration: State of Israel
Appendix 1. Short Notice for the AI Mirror Form
It is recommended to place the following notice before the User completes the AI Mirror form:
“The AI Mirror form is used to create a personalized result based on your answers. You are not required to disclose personal, sensitive, or intimate information. You may answer briefly, neutrally, and without personal details. At the same time, the quality, depth, and personalization of the result depend on the completeness and specificity of your answers. Do not enter medical diagnoses, bank card details, passwords, government identifiers, or data of third parties.”
Appendix 2. Short Notice for Checkout
During the purchase process, it is recommended to place a separate link to this Policy and the following text:
“I have read the Privacy Policy and understand how my data is used to provide the Product, including the processing of form answers to generate the AI Mirror / ‘Clarity Map.’”
Appendix 3. Supplier Documents and Links for Review
Below are key documents of third-party services that are used or may be used to provide the Product. These links should be reviewed periodically, as providers may update their terms.
Anthropic API
Anthropic DPA / SCC for commercial products: https://privacy.anthropic.com/en/articles/7996862-how-do-i-view-and-sign-your-data-processing-addendum-dpa
Use of commercial product data for model training: https://privacy.anthropic.com/en/articles/7996868-is-my-data-used-for-model-training
Anthropic approach to GDPR: https://privacy.anthropic.com/en/articles/10015887-what-is-your-approach-to-gdpr-or-related-issues
API data retention / Zero Data Retention: https://docs.anthropic.com/en/docs/build-with-claude/zero-data-retention
Anthropic Trust Center: https://trust.anthropic.com/
Make
Terms & Conditions / Data privacy documents: https://www.make.com/en/terms-and-conditions
Make Data Processing Agreement: https://www.make.com/data-processing-agreement.pdf
Privacy and GDPR: https://www.make.com/en/privacy-and-gdpr
Tally
Tally GDPR: https://tally.so/help/gdpr
Tally Data Processing Agreement: https://tally.so/help/data-processing-agreement
Tally Privacy Policy: https://tally.so/help/privacy-policy
Creating GDPR-compliant forms: https://tally.so/help/how-to-create-a-gdpr-compliant-form
Airtable
Airtable Data Processing Addendum: https://www.airtable.com/company/dpa
Airtable DPA help article: https://support.airtable.com/docs/airtables-data-processing-addendum
Airtable Trust & Security: https://www.airtable.com/company/trust-and-security
SendGrid / Twilio
Twilio Data Protection Addendum: https://www.twilio.com/en-us/legal/data-protection-addendum
Twilio Privacy Notice: https://www.twilio.com/en-us/legal/privacy
Twilio / SendGrid GDPR information: https://www.twilio.com/en-us/resource-center/general-data-protection-regulation-2
HTML/CSS to Image
HTML/CSS to Image Privacy Policy: https://htmlcsstoimage.com/privacy
HTML/CSS to Image Terms of Service: https://htmlcsstoimage.com/terms
HTML/CSS to Image pricing / deletion of images: https://htmlcsstoimage.com/pricing
HTML/CSS to Image Make integration: https://apps.make.com/htmlcss-to-image
Lemon Squeezy
Lemon Squeezy Buyer Terms: https://www.lemonsqueezy.com/buyer-terms
Lemon Squeezy Privacy Policy: https://www.lemonsqueezy.com/privacy
Lemon Squeezy DPA: https://www.lemonsqueezy.com/dpa
Lemon Squeezy Merchant of Record explanation: https://docs.lemonsqueezy.com/help/payments/merchant-of-record
