Privacy Policy

Who we are

AI Guidant is a film and video production studio and a Software Lab of apps.

Privacy questions: privacy@aiguidant.org. Other questions about the site: studio@aiguidant.org.

What we collect

Browsing the site does not require an account. The pages do not ask for your name, phone number, or payment details.

If you join the mailing list, the homepage form sends your email address to /api/mailing-list/subscribe. After the submission passes the form checks, we record a rate-limit entry. If the attempt is within the limit, we also store the signup:

• Your email address, the time you signed up, whether that address was saved with our email provider, and whether the studio was notified, including the provider’s id for that notice.
• The rate-limit record, kept separate from your email. It holds a keyed hash of the IP address (HMAC-SHA256, using a secret that stays on the server), a count of attempts, and an expiry time. It does not hold the raw IP address.

The form includes a hidden field that visitors are not asked to fill in. If that field is filled in, we reject the submission and do not store it. Submissions that fail the other form checks are not stored either.

Why we use it

We use your email address to send updates about AI Guidant work and Software Lab apps, and to tell the studio that you joined.

The studio notice goes to studio@aiguidant.org. It includes your email address and the signup time in UTC. It is sent from AI Guidant <noreply@aiguidant.org>. The reply-to address on that notice is your email address, or studio@aiguidant.org if the address were missing. Signing up does not send you an automatic welcome email, and this sign-up code does not start a marketing campaign.

The IP hash is used only to limit sign-ups to five attempts for each hashed IP in each 15-minute window.

Legal basis and consent

We email you based on your consent. Submitting the form, under the consent line on the homepage, is how you give it. You can withdraw consent at any time by unsubscribing.

A later submission is a new consent. If an address was unsubscribed and you submit the form again, we treat that submission as consent to receive emails again and mark the contact subscribed.

Cookies and analytics

This site does not use advertising cookies. The pages do not load an analytics or tracking script.

Your browser does request a few other services while you view the site:

• Typefaces are loaded from Google Fonts, so your browser requests those files from Google.
• The homepage embeds a YouTube video from youtube-nocookie.com. YouTube does not set cookies for that player until someone plays the video.
• If you press play on a film trailer, the site loads a player from youtube-nocookie.com after you choose to play it.

If we add site analytics later, we will update this policy before we turn them on.

Sharing

We do not sell personal information.

To run the mailing list, we use these service providers:

• Resend stores the address as a contact in a segment named “AI Guidant” (Resend’s replacement for an audience) and sends the studio notice.
• The website and the sign-up service are hosted by Replit. Signup records are stored in our PostgreSQL database.

We do not give the mailing list to advertisers. The font and video requests above go to Google and YouTube because the page loads their files. We do not send them the mailing-list record.

Retention

We keep your email address and the signup record while you are on the list and we need that record to run it. There is no automatic deletion date for that record. You can ask us to delete it.

Each rate-limit record is set to expire 30 minutes after the first attempt in that 15-minute window. Expired rate-limit records are deleted when a later sign-up is processed. They are not removed on a separate clock.

Your choices and rights

You can ask us to access the personal information we hold about you, correct it, delete it, or stop emailing you.

To unsubscribe, email studio@aiguidant.org. The studio notice this sign-up code sends does not include an unsubscribe link. If a message we send you includes an unsubscribe link, you can use that link.

To request access, a correction, or deletion, email privacy@aiguidant.org. Tell us the address you used to sign up so we can find the record. When you ask us to delete it, we will delete the signup record we hold and the Resend contact for that address.

Those requests are the practical form of the rights described by the CAN-SPAM Act, the GDPR, the UK GDPR, and California’s CCPA-style privacy rights, including the right to know, correct, and delete personal information. We do not sell personal information, and we do not share it for cross-context advertising. We do not claim a certification under those laws. If you are in the European Economic Area or the United Kingdom, you can also complain to your data protection authority. This site does not publish a postal address.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us an email address, email privacy@aiguidant.org and we will delete it.

Security

We reject sign-ups that fail the hidden-field check, accept the mailing-list form from this website, and limit repeated attempts. Our sign-up log records the request method, the path, and, if sign-up fails, an error code. It does not record your email address, the request body, or the provider’s response. No method of storage or transmission is completely secure.

Changes

If we change how we handle information, we will update this page and the effective date above.

Contact

Privacy: privacy@aiguidant.org

Studio and general questions: studio@aiguidant.org