What this site collects and why

Analytics on public pages

Google Analytics 4 runs on public pages to report use of the public site. Private receipt, account and staff pages do not run browser analytics. We send the approved route path and a small set of closed events. Query strings, fragments, booking answers, challenge details and email addresses are not sent to GA4. Use the quiet opt-out setting below to stop future browser-side GA4 collection on this browser.

After a confirmed booking, saved question or waitlist join, the server sends GA4 a conversion event with only the booking type, approved booking lane and duration, approved question topic or approved waitlist audience. It does not include your email, answers, challenge, question, selected time or provider links. The browser setting below does not stop these limited server-side conversion events.

Vercel hosts the site and provides Vercel Web Analytics. Vercel describes Web Analytics as cookie-free. Its infrastructure may also create operational logs needed to deliver and protect the site.

Booking and question information

If you book a session, CaL collects your selected context, work type and timing, challenge details, email address and chosen time. If live times are unavailable, you can send a request instead so Ali can reply with times. After submission, a private receipt link exchanges its secret for a protected browser cookie; the receipt shows only your booking record and brief. An optional client account uses Google, LinkedIn or an emailed sign-in link. We store your name, email and profile picture when supplied; a verified email is required to see matching historical enquiries. Account pages show your own enquiries, conversation and released documents. Linked-provider credentials and session records support sign-in and account linking.

Booking records and request briefs are stored in a CaL-controlled database hosted on Neon (PostgreSQL). Authorized CaL staff can access assigned records to arrange the session and respond. A confirmed scheduled booking may create a Google Calendar event and a generated Google Doc containing the working brief; Google Drive and Google Docs store that private brief. You do not need a Google account to submit a booking. Pro bono requests do not create a Calendar event or Google Doc. Resend sends booking notices, request notices and confirmation email.

If you ask a question, submit a pro bono request or reply about a booking, CaL stores the message and reply address in the same database. The reply channel stores message text and does not ingest attachments. To limit abuse, the server counts one-way fingerprints of the source IP address and email in hourly windows; it does not store the raw IP address in that counter.

Email audiences and consent

AI for Everyday Users and AI for Executives updates use one shared CaL AI-learning audience in Resend, and each consent checkbox states that one list covers both topics, to support CaL’s obligations under Canada’s anti-spam law, CASL. The Rocky Mountain House status reminder uses a separate award-reminder audience and separate consent. Joining either audience does not subscribe you to the other. CaL keeps a record of each consent in its database. Resend sends a confirmation after a learning signup and every marketing email provides an unsubscribe method.

Storage, retention and deletion

Your theme and analytics opt-out choices are stored in your browser. Clearing local storage resets those choices.

CaL’s chosen schedule retains enquiry correspondence and released documents for three years after recorded closure. Reopening clears that disposal date; closing again restarts it. Ali reviews disposal and any documented continuing purpose or legal hold. Deletion covers CaL-controlled database, Drive, Calendar and email records, subject to confirmed provider and backup expiry windows; we do not promise immediate erasure from backups. Sign-in links expire after ten minutes and sessions after eight hours. Expired authentication records are cleared separately, and the default for security logs is 90 days. Email audience consent and account closure are handled separately: disposing of an enquiry does not delete the sign-in account, linked-provider credentials, other enquiries or newsletter consent. Ask Ali separately to close or delete an account. Contact Ali for access or deletion requests.

External services and links

Google, Vercel and Resend process information under their own service terms and privacy practices. Public project and learning links open other websites in a new tab. CaL does not place their content inside this site.

Questions and requests

For a privacy question, access request or deletion request, email ali.akber@citadellabs.ai.