Last updated: 2026-10-17
a7t.ai is operated by Leonardo Cardoso. This page explains what data we collect, why, and what your rights are. We aim for the minimum needed to run the site, the consultancy, the booklet store and the Moments store.
What we collect
- Analytics, PostHog. When you accept cookies, we load PostHog (EU-hosted) to count page views and understand how the site is used. We do not sell this data. If you decline, no analytics scripts load at all.
- Email list. If you submit your email to receive the free 1-pager or notifications about new booklets, we store your email and language preference in the EU. Legal basis: your consent, confirmed via a click in a confirmation email. You can unsubscribe in one click via the link in every email; on unsubscribe the record is kept inactive so the same address cannot be silently re-added later. Email the operator for full deletion.
- Transactional email, Resend. Confirmation, welcome, and delivery emails are sent through Resend. They process your email address solely to deliver the message.
- Booklet delivery. Master files and per-purchase watermarked copies are stored in the EU. Your watermarked copy bears your email and order ID and is linked from the delivery email; the link stays valid as long as the file exists.
- Contact Card. The details you type on the Contact Card page (name, profession, company, phone, email, website and the card’s look) go to Polar with your checkout. Nothing is stored on our side until you pay. Once you do, we keep your card’s details and its Apple Wallet pass with your order, in the EU, so the link in your email works and so you can change the card for 30 days. If you buy on Polar directly, we store the details once you make your card. The sample pass on the page is a fixed file and holds nothing of yours.
- Purchases, Polar. If you buy a booklet or a Moments product, Polar.sh is the merchant of record and handles payment + invoice. We receive only the purchase event (product, amount, your email) so we can deliver what you bought. Polar’s privacy policy applies to the payment data.
- Site infrastructure, Cloudflare. The site is hosted on Cloudflare. They log request IPs for caching and abuse prevention, and run the captcha that protects the subscribe form.
- Fonts. Loaded from Google Fonts and Fontshare. Both CDNs see your IP address.
We do not run ads. We do not embed third-party trackers beyond what is listed above.
Your rights (GDPR / LGPD)
Email leo@a7t.ai to access, correct, or delete your data. We respond within 30 days. Unsubscribing only marks the record inactive; mention “delete my data” in the email for full deletion. You can also complain to your local data-protection authority; in Germany, that’s the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Cookies
We remember your analytics choice locally in your browser. If you accepted, PostHog sets its own cookies; if not, nothing else is set. Polar’s checkout (a separate domain) may set its own cookies under its cookie policy.
Contact
Leonardo Cardoso · leo@a7t.ai