Privacy Policy

Last updated: 2026-09-06 (DRAFT)

Introduction

Introduction

This Privacy Policy explains what information JTMDAI Development Group LLC (Minnesota) (“JTMDAI,” “we,” “us”) receives when you use the website at jtmdai.com (the “Site”), and how we use it. The Site is a simple, mostly static informational website for a personal software and AI lab. It does not require you to create an account. It may use PostHog for optional visit analytics only after you Accept the cookie banner (described below); it does not run advertising or cross-site tracking technology.

What we collect

What we collect

We deliberately collect as little as possible:

• Information you email us. Contact links on the Site open your own email program addressed to admin@jtmdai.com. If you email us, we receive whatever you put in that message — for example your name, email address, and the contents of your message.
• Information you submit via the contact form. The contact page includes a web form. When you submit the form, we receive your name, email address, the contents of your message, and optionally your company or organization name. We also receive technical metadata associated with your request: your IP address, browser user-agent string, and the Cloudflare-derived country code of your request. This information is stored in our Supabase database (US servers), processed by a Cloudflare Worker, and may also be forwarded to our email notification service (Resend) so we can read and respond to your inquiry. We retain this data only as long as needed to follow up on your inquiry and keep records of our communications.
• Payment information — collected and processed by Stripe, not by us. When you pay for a consulting engagement, checkout is handled entirely by Stripe. You enter your payment details on Stripe’s systems. We do not collect, see, or store your full card number; we receive only limited confirmation details from Stripe (such as that a payment succeeded, and basic billing contact information) needed to fulfill the engagement and keep records.
• Basic visit analytics — PostHog, only after Accept. The Site shows a cookie / analytics banner. Analytics scripts load only if you choose Accept. If you Decline (or have not chosen yet), we do not load visit analytics; a Decline is remembered in this browser until you clear site data. Your choice is stored in your browser’s localStorage under the key jtmdai_cookie_consent as accepted or declined. When analytics are enabled, PostHog receives the page URL, the referring page, and basic browser and screen information (such as screen size and page title), associated with a random identifier also stored in localStorage. That identifier is randomly generated, is not derived from your device, and is not linked to your name or email. The Site does not set third-party advertising cookies for this purpose. We also honor Do Not Track and Global Privacy Control — when either is enabled, analytics collection stays off even if you previously Accepted. There is no advertising, no cross-site tracking, no session recording, no fingerprinting, and no “interest-cohort” profiling, and we do not sell this data. Standard server logs may still be generated by our hosting provider for security and reliability.
• Error reports — collected via Sentry. The Site uses Sentry, an error-monitoring service, to catch and report JavaScript errors so we can find and fix bugs. When an error happens, we receive the error message, a stack trace, basic browser and operating-system information, and the URL of the page where it occurred — never your form input and never other personal data. Sentry sets no cookies, and we honor the same Do Not Track and Global Privacy Control signals for error tracking as we do for analytics.

How we use it

How we use it

We use the limited information we receive only to:

• respond to your email or contact-form submission and carry on our correspondence;
• provide, schedule, and fulfill consulting engagements you request;
• process and keep records of payments (via Stripe);
• count page visits and understand overall Site traffic, using the consent-gated analytics described above (only when you have Accepted); and
• meet legal, accounting, and tax obligations.

We do not sell your information, and we do not use it for advertising or behavioral profiling.

Third parties

Third parties

We keep third parties to a minimum:

• Stripe (payment processor). Payments are processed by Stripe, Inc. When you check out, your payment information is handled under Stripe’s own terms and privacy policy. See Stripe’s Privacy Policy.
• PostHog (analytics service). When you Accept the banner, the page-visit analytics described above are processed for us by PostHog, Inc. on its United States cloud service. If you Decline, we do not send those events. PostHog handles this data on our behalf under its own terms and privacy policy, and we do not permit it to sell the data or use it for advertising. See PostHog’s Privacy Policy.
• Sentry (error-monitoring service). The error reports described above are processed for us by Sentry, Inc. Sentry handles this data on our behalf under its own terms and privacy policy, and we do not permit it to sell the data or use it for advertising. See Sentry’s Privacy Policy.
• Supabase (contact-form storage). Contact form submissions are stored in a PostgreSQL database hosted by Supabase, Inc. on US servers. Supabase handles this data on our behalf under its own privacy policy. See Supabase’s Privacy Policy.
• Cloudflare (contact-form Worker & hosting). The contact form is processed by a Cloudflare Worker running on Cloudflare’s network. The Site is also served via Cloudflare Pages. Cloudflare may process your IP address and request headers as part of routing and security. See Cloudflare’s Privacy Policy.
• Resend (optional email notification). When you submit the contact form, we may use Resend, Inc. to deliver a notification email to us. If Resend is enabled, your name, email, and message are transmitted to Resend for delivery. See Resend’s Privacy Policy.
• Email. Email you send to admin@jtmdai.com is delivered and stored through our email provider so we can read and reply to it.
• Hosting. The Site is served by a hosting provider that may keep standard technical logs (such as IP address and request time) for security and reliability.

We do not share your information with third parties for their own marketing.

Data retention

Data retention

We keep correspondence and engagement records only as long as needed for the purposes above — to maintain our relationship with you, to keep business and tax records, and to comply with the law — after which we delete or archive them. Payment records held by Stripe are retained under Stripe’s own policies. (This is a draft default; final retention periods are to be confirmed with counsel.)

Your choices & rights

Your choices and rights

You can ask us about the information we hold about you. To request access to, correction of, or deletion of your information, email admin@jtmdai.com and we will respond within a reasonable time.

You control analytics with the cookie banner: Accept loads analytics; Decline leaves them off. You can clear your browser’s localStorage at any time to reset that choice and remove the random analytics identifier. The Site also honors Do Not Track and Global Privacy Control signals — when either is enabled, analytics collection stays off.

Depending on where you live, you may have additional rights. For example, residents of California and the European Union / European Economic Area may have specific rights to access, correct, delete, or restrict the use of their personal information, and the right not to be discriminated against for exercising those rights. We honor applicable rights regardless of where you are; contact us at the address above to exercise them. (The exact legal mechanics here are a draft and are to be finalized with counsel.)

Security

Security

The Site is served over HTTPS, and payment data is handled on Stripe’s PCI-compliant systems rather than ours. We take reasonable measures to protect the limited information we hold. No method of transmission or storage is perfectly secure, however, so we cannot guarantee absolute security.

Children

Children

The Site is intended for businesses and adult professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where a higher age applies). If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page. While this notice remains marked DRAFT, it is provisional and subject to change before it becomes final.

Governing law

Governing law

This Privacy Policy is governed by the laws of the State of Minnesota, USA, without regard to its conflict-of-laws rules.