Privacy Policy

• Your email address. We collect it when (a) you enter it on the reader gate at ebook.runitonai.com to open the Ebook you purchased, and (b) you submit it to one of our email sign-up forms (for example, to receive a free sample or product updates).
• Purchase information. When you buy the Ebook, our payment processor Gumroad (see Section 4) shares your purchase email and a sale identifier with us so we can unlock your access. We do not receive or store your full payment-card details — Gumroad handles payment.
• Technical and usage data. Like any website, our hosting provider (Cloudflare) processes standard request data such as your IP address, browser type, and the pages you request, for security and delivery. At and after launch we also intend to use Google Analytics to understand aggregate site usage (see Section 4); this may set cookies and process usage data including a truncated IP address.

We do not knowingly collect sensitive personal data, and we do not ask for more than the email needed to deliver what you bought or signed up for.

• Buyer access (privacy-preserving by design). We do not store buyer emails in plain text for the reader gate. Instead, we store a one-way SHA-256 hash of your normalised email in Cloudflare KV, alongside a non-identifying source tag (e.g. the Gumroad sale reference). When you enter your email at the gate, we hash it and check for a match to unlock the Ebook.
• Staying logged in. On successful sign-in we set a single first-party cookie (reader_session) in your browser for 30 days. It contains your email and a cryptographic signature and is used only to keep you logged in to the reader. It is marked HttpOnly, Secure, and SameSite=Lax.
• Email updates. If you give us your email through a sign-up form, we use Kit (ConvertKit) to manage the list and to send you product updates and new-version notifications for the Ebook. You can unsubscribe at any time using the link in any email.
• Purpose limitation. We use your data only to deliver the Ebook and its updates, provide support, run and secure our sites, and (in aggregate) understand usage. We do not sell your personal data.

• reader_session — essential first-party cookie for reader access (above).
• Kit (ConvertKit) form script — loaded on pages that contain an email sign-up form; used to capture sign-ups.
• Google Fonts — our pages load fonts from Google's font CDN (fonts.googleapis.com / fonts.gstatic.com), so Google receives the request data (including IP) needed to serve the fonts.
• Google Analytics — planned for launch; will set analytics cookies. Until it is enabled, no analytics cookies are set by us.

We rely on the following third parties, each acting as a service provider / processor. Their own privacy terms also apply:

• Gumroad — payment processing. Gumroad is the merchant of record for your purchase and collects and remits applicable sales taxes / VAT / GST.
• Kit (ConvertKit) — email list management and broadcasts.
• Cloudflare — website hosting, content delivery, and storage (Workers, KV).
• Google — web fonts now, and Google Analytics at launch.

We do not otherwise disclose your personal data, except where required by law.

Our providers above may process data outside Singapore (for example, in the United States). Where personal data is transferred abroad, we take reasonable steps so that it is protected to a standard comparable to the PDPA.

We keep the hashed buyer record for as long as you retain access to the Ebook. We keep your email on our update list until you unsubscribe or ask us to remove it. Technical logs are retained only as long as needed for security and operations.

You may request access to the personal data we hold about you, request a correction, or withdraw consent to our use of it (for example, by unsubscribing or asking us to delete your record). We will respond within a reasonable time. Note that withdrawing consent may mean we can no longer provide access to the Ebook.

We may update this policy from time to time. We will post the revised version here with a new "Last updated" date.