Legal

Privacy Policy

Last updated: April 2026

This policy describes what guydvorkin.com ("the site", operated by Guy Dvorkin) collects, why it's collected, who processes it, and what choices you have. It applies to visitors from any geography, with extra rights explicitly granted to EU residents under GDPR and California residents under CCPA.

Data I collect directly

  • Contact form (/contact) - name, email, optional company, optional phone, your message. Used to respond to your inquiry.
  • Chat sessions (/chat) - your messages, the assistant's replies, an anonymous visitor identifier (cookie), and if you supply them, your name, email, company, and phone. Used to run the assistant, preserve your chat across visits, and follow up if you leave contact info.
  • Readiness assessment (/readiness) - your answers to the assessment questions and the resulting score and tier. Stored alongside the chat session so you can return to your results.
  • Account (optional, via Clerk) - if you sign in, Clerk manages your email, basic profile, and session. Used to pre-fill forms and authenticate gated features.
  • Booking (/contact scheduler) - when you book a call through the Cal.com embed, Cal.com receives the scheduling details directly. The site receives no additional booking data beyond what you submit on the form.

Data I collect automatically

  • Analytics - page visits, referrers, coarse geography (country/city level), device and browser type, and interaction events. Processed through PostHog, and, when configured, Google Analytics 4 and/or Meta Pixel. These services use cookies and similar technologies. Where required by law, they are only enabled after consent.
  • Cookies - essential cookies for session management (Clerk), an anonymous visitor ID to tie return visits to the same chat thread, and analytics cookies from the providers above.

Third-party processors

These providers process data on the site's behalf under their own privacy policies:

  • Vercel (hosting, logs)
  • Clerk (authentication)
  • Neon + Supabase (database for chat and readiness data)
  • Anthropic and OpenRouter (LLM inference for chat)
  • Cal.com (booking)
  • Attio (CRM, when you submit contact details)
  • Resend (transactional email)
  • PostHog (product analytics)
  • Google Analytics (traffic analytics, if enabled)
  • Meta Pixel (advertising measurement, if enabled)

How long I keep it

Contact-form messages, chat transcripts, and readiness results are retained for up to 24 months unless you request deletion sooner. Analytics data follows the default retention of the respective provider. Account data (Clerk) is retained as long as your account exists.

Your rights

  • Request a copy of the data I hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Withdraw consent for analytics and advertising cookies at any time.
  • Object to or restrict specific processing.
  • File a complaint with your local data-protection authority (EU) or relevant regulator (California, other jurisdictions).

To exercise any of these rights, email hello@guydvorkin.com with "privacy request" in the subject. I'll confirm receipt and respond within 30 days.

Contact

Guy Dvorkin - hello@guydvorkin.com - data controller for this site. For disclosure of a security issue, see /.well-known/security.txt.