Privacy

Privacy Policy

This policy describes what information zackfarris.com collects, how it is used, and the choices you have. For a broader view of security controls and subprocessors, see the Trust page.

Last updated June 20, 2026.

1. Information collected

Contact form submissions. Name, email, and the message you send.
APA access-code requests. Email address and the issued access code, used to gate the APA preview for verified investors.
Basic request logs. Standard server and edge logs (timestamp, route, status, coarse client metadata such as user agent and IP) used for reliability and abuse investigation.

No third-party advertising pixels or behavioral marketing trackers are loaded on the Site.

2. How information is used

Information is used to reply to your message, deliver requested materials (such as APA access codes), keep the Site reliable, investigate abuse, and meet legal obligations. It is not sold, rented, or shared with marketers.

3. Legal bases

Where applicable law requires a legal basis (for example, under GDPR), the bases relied on are: your consent when you submit a form, the legitimate interest in operating and securing the Site, and compliance with legal obligations.

4. Subprocessors

The Site relies on a small number of service providers to host the application, send transactional email, and route AI-assisted features. Categories and roles are described on the Trust page.

5. Retention

Contact submissions and access-code records are retained as long as needed to support ongoing conversations and reasonable record keeping, and then deleted on request or as part of periodic cleanup. Request logs are retained on a rolling short-term basis.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal information, and to object to certain processing. Requests can be sent to privacy@zackfarris.com and are honored within a reasonable period, confirmed by reply.

7. Security

Transport is encrypted with TLS. Stored data is protected with row-level security in a managed Postgres database. Webhooks and privileged endpoints use signed, timing-safe authentication and structured audit logging. See the Trust page for details.

8. Children

The Site is not directed to children under 13, and information is not knowingly collected from them. If you believe a child has provided information, contact privacy@zackfarris.com so the record can be removed.

9. International transfers

The Site is operated from the United States. If you access it from outside the U.S., your information will be processed in the U.S. and other jurisdictions where service providers operate.

10. Changes to this policy

This policy may be updated to reflect changes in practices or legal requirements. The “Last updated” date above reflects the most recent revision.

11. Contact

Privacy questions, data requests, and security reports can be sent to privacy@zackfarris.com.