For the free weekly brief: name, email address, optionally firm and role (you fill these in on the signup form). Used to deliver the brief and to keep the subscriber list at a manageable size.
For one-time report purchases: PayPal sends us your name, email, transaction ID, and payment status. We use the email to deliver the PDF and to send a single receipt. We do not store credit-card numbers — PayPal handles those.
For subscription tiers: the same as above, plus the PayPal Subscription ID and renewal date. We use the email to send the welcome magic link and to bind your API key (Predictor/Enterprise) and JWT session.
For portal usage: we log API calls and dashboard queries against your account for rate-limiting and abuse prevention. We do not log the content of your queries against any analytics platform; the logs stay on the Cloudflare Worker and Hugging Face Space and are aged out after 30 days.
Subscriber list (email + name + tier): stored in Cloudflare KV. Encrypted at rest. Only Michael Msebenzi has access.
PayPal billing data: stored by PayPal, not by ADW. Subject to PayPal's privacy policy.
Magic-link tokens: stored in Cloudflare KV, auto-deleted after 1 hour (sign-in links) or 24 hours (welcome links).
API keys: stored in Cloudflare KV, retained for the life of the subscription. Rotated by user request or on tier change.
Order tracker and subscriber tracker: CSV files held by Michael Msebenzi for revenue reconciliation. Not shared.
The weekly brief on Thursdays, sent via BCC from [email protected]. Recipients cannot see other recipients' addresses.
Transactional email: welcome links, receipts, magic links, occasional product-release notifications. Sent via Resend (a third-party email delivery service); Resend is bound by their privacy policy.
No marketing partners. Your email is never sold, rented, or shared for marketing purposes.
ADW operates from the United States. By using the service from outside the U.S., you consent to your data being processed in the U.S. EU residents may exercise GDPR rights (access, rectification, erasure, data portability, objection) by emailing [email protected].
The service is not directed at anyone under 18. We do not knowingly collect data from minors.
This policy may be updated. Active subscribers receive notice of material changes by email at least 30 days before the change takes effect.