What we collect
- Your email address — used for authentication and course communications only.
- Your intake answers — role, industry, org size, team shape, bleed areas, tools, AI experience, and priorities. Plain-language descriptions of your operation.
- Exercise transcripts — the conversation between you and the course interviewer during each module exercise.
- Generated artifacts — your Intelligence Brief, Time Drain Map, and other documents the course produces for you.
What we never collect
- Raw data exports from your systems
- Customer names, employee names, or financial specifics
- Screen recordings, screenshots, or system access of any kind
- The course does not integrate with, connect to, or access any of your tools — ever
Where data is stored
All data is stored in Supabase (hosted on AWS, US East). Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Database access requires row-level authentication — your data is isolated to your account.
Who accesses your data
Exercise transcripts are reviewed by the team at Architech Business Consulting during the founding cohort to maintain quality — specifically, to ensure the AI interviewer asks good questions and produces useful artifacts. The team is currently Adam Buerer (course creator). Transcripts are never shared with third parties, used for marketing, or published.
After the founding cohort period, transcript review will become opt-in only.
AI processing
Conversations are processed by Anthropic (Claude) via their API. Per Anthropic's enterprise terms, API inputs and outputs are not used to train their models. Anthropic retains API logs for up to 30 days for trust & safety, then deletes them.
Retention & deletion
- Your data is retained for the lifetime of your account.
- You can request full deletion at any time by emailing courses@webarchitechs.com. Deletion is completed within 7 business days and includes all intake data, transcripts, artifacts, and account records.
- Artifacts you download belong to you permanently — we cannot delete your local copies.
Third-party services
- Supabase — authentication and database (AWS US East)
- Vercel — application hosting
- Anthropic — AI processing (Claude API, no training on inputs)
- Stripe — payment processing (we never see or store card numbers)
- HubSpot — email and funnel stage tracking (email address and course progress stage)
No HIPAA / BAA at this time
This course is not HIPAA-compliant and we do not offer a Business Associate Agreement. If your operation involves protected health information, describe your workflows in general terms — the course never asks for patient data, employee health records, or any information that would constitute PHI.
Questions
Email courses@webarchitechs.com — a human reads every one.