Privacy policy.

01

What we collect.

What you hand us

• Contact form. Your name, email address, the kind of inquiry you picked, and your message.
• Clients. Business contact details, billing information, and the material you send us for the work — copy, images, logins, and the credentials we need to run your marketing.
• Library members. Your name, email, and account settings, plus which lessons you have opened, so the curriculum knows where you left off.
• Anything else you email or say to us. We keep correspondence the way any business does.

What the servers record automatically

Our host, Netlify, keeps standard web server logs: IP address, browser type, the page requested, and the time. That is ordinary infrastructure logging used for security and troubleshooting, not a profile of you, and we do not link it to your identity.

What we do not collect

No advertising identifiers. No cross-site tracking. No behavioral profiles. No purchased data about you from anyone else. Also: no Social Security numbers, no biometric data, and no precise location.

02

What we do with it.

• Answer you when you write to us.
• Deliver, host, and support the work you hired us for.
• Bill you, and keep the accounting records the law requires.
• Run your Library membership and grant access to lessons.
• Send service messages — renewal notices, project updates, and changes to these policies.
• Keep the site secure and working.

We send occasional studio email to people who asked for it. Every one has an unsubscribe link, and unsubscribing has no effect on your service.

We do not use client material or member activity to train third-party AI models. We build with AI tools every day, and we keep your confidential material out of them except where a tool is being used specifically to do your work, under that vendor's business terms.

03

Cookies.

This site uses almost none. There is no analytics cookie and no advertising cookie anywhere on it.

• Handbook session cookie. Our internal staff handbook at /handbook/ sits behind a password. Signing in sets one signed cookie so you are not asked again on every page. It is strictly necessary for that gate and does nothing else.
• Library sign-in. Member accounts use a session cookie to keep you logged in.

Because we run no tracking cookies, there is no consent banner to click through. That is deliberate.

04

Who else touches your data.

Only the vendors that make the business run, and only for that purpose. Each is contractually bound to protect it.

• Stripe — payments

  Processes card payments and subscriptions. Card details go directly to Stripe; we receive only the last four digits, the card brand, and whether the charge succeeded. See Stripe's privacy policy.

• Netlify — hosting and forms

  Serves this website and receives contact form submissions before they reach our inbox.

• Cloudinary — images

  Delivers the photography on this site. Your browser requests images from Cloudinary the same way it requests any image on the web.

• Google Fonts — typefaces

  Serves the fonts you are reading right now. Google receives the request your browser makes for the font file.

• YouTube — embedded video

  Some articles embed video. We use youtube-nocookie.com, the privacy-enhanced mode, so nothing is set unless you press play.

• Email and business tools

  Standard email, calendar, and accounting software, used to correspond with you and keep our books.

Beyond that, we will disclose information only if the law requires it, if we must to protect someone's safety or our legal rights, or if the business is ever sold — in which case the buyer inherits these same commitments and we will tell you before anything moves.

We do not sell personal information, and we do not share it for cross-context behavioral advertising — including as those terms are defined under California law. We never have.

05

How long we keep it.

• Inquiries that go nowhere: deleted within two years.
• Client records: kept while you are a client and for three years after, so we can support work we built.
• Financial records: seven years, because tax law says so.
• Member accounts: kept while active; deleted within a year of cancellation unless you ask sooner.
• Server logs: rotated on our host's schedule, typically within 30 days.

Ask us to delete something earlier and we will, unless we are legally required to keep it.

06

Your rights.

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, send you a copy, or stop emailing you. Email info@humanaimarketing.org and we will respond within 30 days. We will not charge you for asking, and we will not treat you differently for having asked.

Illinois, California, and other state privacy laws grant specific versions of these rights, and residents of the EU or UK have them under the GDPR — including the right to complain to a supervisory authority. We extend the same treatment to everyone rather than sorting people by ZIP code. Where the GDPR applies, our legal bases are performing our contract with you, our legitimate interest in running and securing the business, your consent for optional email, and compliance with legal obligations.

07

How we protect it.

Everything on this site is served over HTTPS. Client credentials live in an encrypted password manager, not in a spreadsheet and not in a shared inbox. Access is limited to the people doing your work, and apprentices work under senior supervision with narrow access. We never put client secrets or API keys in a public repository.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affects your personal information, we will notify you promptly and tell you plainly what happened.

08

Young people.

Our services are not directed to children under 13, and we do not knowingly collect information from them. If we learn we have, we delete it.

Our apprenticeship program works with people aged 16 to 22. For applicants under 18, we collect only what an application needs, and we ask for a parent or guardian's involvement before anyone starts.

09

Where the data lives.

We are an Illinois business and our vendors store data primarily in the United States. If you write to us from outside the U.S., you are sending your information here, where privacy law differs from your own.

10

Changes to this policy.

We will update this page when our practices change, and the effective date at the top will tell you when. For anything material, we will email active clients and members rather than quietly editing the page.

11

Reach a person.

Privacy questions go to a human being, not a ticket queue.