The short version
- We never sell your data. Not to advertisers, not to brokers, not to anyone. Ever.
- We only use what you give us for ourselves — to reply to you, to personalize what we show you on the site and in email, and to send you the occasional marketing email (think: the next cohort opens, a new tool, a piece of writing). Roughly once a month, often less.
- You can ask what we have, ask us to delete it, ask us to fix it, or unsubscribe — any time. Email [email protected] and a real human will respond.
Who we are
This site is run by Vincent DiPaola, doing business as teamvince, a sole proprietor based in Brooklyn, NY. We're the data controller for everything described below.
What we collect
From the forms you fill out on /consult, /coaching, /harness, and /waitlist:
- Your name and email (always)
- Where applicable: company, role, team size, the kind of help you're looking for, what's stuck, the idea you want help on, and a Loom-consent flag if you opt in to a 60-second Loom take on your idea
- UTM parameters, the page that referred you, and a Cloudflare Turnstile token (so we know you're not a bot)
Automatically, when you visit any page:
- Anonymous page-view analytics via PostHog. We run PostHog in
identified_onlymode, which means we don't attach a name to your sessions until you submit a form. Until then it's a random distinct-id. - Standard server-side request data: IP address, user agent, the page you came from. We use this only for spam/abuse handling, and we don't keep it tied to a profile.
What we don't collect:
- Payment card details — Stripe handles those. We never see them.
- Precise location. Country-level analytics is the most we'd ever know.
- Anything we don't ask you for on a form. There are no hidden trackers.
Why we collect it
- To reply to you when you reach out about consulting, coaching, the course, or the harness.
- To send the welcome email — for example, the harness starter zip when you grab the lead magnet, or cohort logistics when you sign up for the course or the waitlist.
- To personalize what you see. If you've already grabbed the harness, we don't push it at you again. If you signed up for the waitlist, we send you the next-cohort email before the public.
- To send the occasional marketing email — roughly once a month, often less. New cohort, new tool, new writing. Every email has a one-click unsubscribe.
- To keep spammers out — that's the Cloudflare Turnstile token.
Who else sees it
We use a small set of third parties to make the site run. Each one only sees what they need to do their job:
- Supabase — stores form submissions in our
intake_submissionstable. Hosted in the US. - Resend — sends transactional emails (welcome, replies) and the occasional marketing email.
- PostHog — anonymous-by-default product analytics. US instance (
us.i.posthog.com). - Cloudflare Turnstile — bot challenge that runs on the forms.
- Google Fonts — serves the typefaces (Inter, Playfair Display, JetBrains Mono). Google may log the request your browser makes to fetch the font files.
- Gamma.app — embedded slide decks on a few pages. Gamma's scripts load when you view those pages.
- Stripe — handles checkout for paid services. Their privacy policy applies at the checkout step.
- GitHub — hosts the open-source repos we link to. Visiting them is governed by GitHub's terms.
We do not share your data with anyone for advertising, retargeting, profiling, or resale. Not now, not ever.
How long we keep it
- Form submissions: we keep them while you're a relevant lead, customer, or alum. If you ask us to delete them, we delete them.
- Analytics: per PostHog's defaults — generally up to a year, then aggregated.
- Marketing list: until you unsubscribe. Unsubscribing removes you from future emails immediately.
- Email threads: we keep email threads in our inbox the way any business does. If you'd like a thread purged, ask.
Your rights
You can ask us to:
- Tell you what we have on you
- Correct anything that's wrong
- Delete it (we will, unless we're required to keep something for tax or legal reasons)
- Stop sending you marketing email — every email has an unsubscribe link, but you can also just ask
- Send you a copy of what we have, in a portable format
Email [email protected]. We aim to respond within a few business days. If you're in the EU, UK, or California, you have these rights under your local law as well — same email, same response.
Cookies and similar tech
What gets set on your browser when you visit:
- A PostHog distinct-id cookie (anonymous until you submit a form)
- Cloudflare Turnstile cookies during a bot challenge on the forms
- Standard browser storage from Google Fonts and Gamma when those load
No third-party advertising cookies. No cross-site tracking pixels. No retargeting. You can clear cookies or block them in your browser at any time; the site will still work.
Kids
The site isn't aimed at anyone under 16. Please don't send us a child's information.
Security
The site runs over TLS. Form submissions are stored in Supabase with row-level security. The only Supabase key in client code is the publishable one, which is scoped to insert-only on the intake table. Nothing's perfectly secure, but we treat your data carefully and we'd rather store less than more.
Changes to this policy
We may update this policy. The "last updated" date at the top is the source of truth. If a change materially affects how we use your data, we'll email anyone on our list before it takes effect.
Contact
Questions, requests, anything — email [email protected].
See also: Terms & Conditions.