Operated by: TechEd Analyst LLC (Connecticut, USA).
Effective: October 5, 2026. Last updated: October 19, 2026 (social media pages). Previous update October 11, 2026 (site analytics and cookie banner; review reminders; business profile; how we collect; stores; Global Privacy Control; Children's privacy; AI training statement; appeals; breach notice timing). This Privacy Policy describes how TechEd Analyst ("we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, and services (collectively, the "Services"). We aim to be clear and practical; this policy is not a substitute for legal advice.
This policy applies to personal information we process when you visit our marketing site, create or use an account, purchase or use paid features, communicate with us, or otherwise interact with the Services. If you engage us for custom consulting or implementation work, additional terms or agreements may describe how project data is handled.
Depending on how you use the Services, we may collect:
Categories (California and similar frameworks). For California residents where the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies, the information above generally falls into categories such as identifiers, commercial information, internet or network activity, geolocation data (approximate, from IP), and inferences drawn from the foregoing. We do not use the Services to knowingly collect sensitive personal information as defined under the CPRA except where you voluntarily submit it and processing is permitted by law.
We collect personal information when you provide it (for example, when you register, fill out forms, or email us), automatically when you use the Services (for example, through strictly necessary cookies such as the sign-in session, server logs, and application telemetry), and from third parties such as authentication or payment providers as needed to deliver the Services. At or before the point of collection where required by law (including certain California requirements for business purposes and retention), we provide this notice and additional details in this policy. See our Cookie Policy for more on cookies.
We use personal information to:
Automated decision-making and profiling. We do not use solely automated processing to make decisions that produce legal or similarly significant effects concerning you without meaningful human involvement. AI features are assistive: outputs are intended to be reviewed by you or your team before use in decisions that could affect rights or obligations.
Lawful basis for processing (EEA and UK users). Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data under the following lawful bases: (a) Performance of a contract (Article 6(1)(b)) — processing your account information and workflow data to deliver the Services you have requested; (b) Legitimate interests (Article 6(1)(f)) — processing analytics data to improve platform performance and security, where those interests are not overridden by your rights and freedoms; (c) Compliance with a legal obligation (Article 6(1)(c)) — where processing is required by applicable law; (d) Consent (Article 6(1)(a)) — our updates list and other optional emails, which you can withdraw at any time with the unsubscribe link or by replying to any of our emails.
Some features send your prompts, inputs, and related context to third-party AI infrastructure providers (for example, Anthropic (Anthropic PBC) or similar vendors we configure) to generate responses. Those providers process data under their agreements with us and their own policies. AI-generated content may be inaccurate, incomplete, or unsuitable for your situation; you should review outputs before relying on them. The Services do not replace professional judgment or guaranteed compliance with any law or regulation.
Sensitive data. Unless a feature explicitly requires it and you have a lawful basis, avoid submitting highly sensitive information (such as full government ID numbers, precise health diagnoses, or data about children) into prompts or uploads. If you are unsure whether your data is appropriate to process through cloud AI tools, consult qualified advisors.
We do not use your User Content — including prompts, inputs, and AI outputs — or any other personal data to train AI models, including large language models, and we do not sell personal data. Our AI providers (Anthropic, and OpenAI for support-chat search) process requests under their commercial API terms. Under those terms they do not use your data to train their models by default, and they may keep request data for up to 30 days, for example to monitor for abuse. See our AI Features Disclosure for details. We do not collect, use, or sell personal data for the purpose of training large language models.
We use these service providers to operate the Services. Each processes personal data only to provide its service to us.
Stores: templates are sold through Payhip, Gumroad and (once our shop opens) Etsy. Our fixed-scope services are paused; past purchases were paid through Gumroad. Each store processes the purchase under its own terms and privacy policy and shares buyer details (such as name, email and order) with us so we can deliver your order and provide support.
Social media pages: we run TechEd Analyst pages on LinkedIn, YouTube, Instagram, Facebook, X, TikTok and Pinterest, and our footer links to them. If you follow, comment on, message or share our posts there, the platform collects and uses that information under that platform's own privacy policy. We see what the platform shows page owners, such as your public profile name, your comments and messages to us, and totals such as views and follower counts. We use it only to reply to you and to see which posts are useful. We do not place any social media pixels, widgets or embedded feeds on our site, so these platforms learn nothing from your visits to techedanalyst.com unless you click through to them.
We update this list when our providers change, and we email account owners at least 30 days before adding a provider that processes the content of their accounts.
We do not sell your personal information for money. We may share personal information with service providers who process it on our instructions, when required by law or legal process, to protect the rights and safety of users or the public, or in connection with a business transaction (such as a merger or acquisition) subject to appropriate safeguards. We may share aggregated or de-identified information that cannot reasonably identify you. Where we use de-identified information, we maintain it in de-identified form and do not attempt to re-identify it except as permitted by law.
Connecticut "sale" / targeted advertising. Some U.S. state privacy laws treat certain disclosures of personal data for targeted advertising as a "sale" or "sharing." If we engage in activities that qualify under those laws, we will describe them and offer appropriate choices as required.
We keep personal information only for these periods:
Deleting your account. You can delete your account yourself in your account settings, or ask us to through our Contact page. Deletion is permanent. It ends any paid subscription immediately (see our Terms of Service and Refund Policy), deletes teams you own and their content, and removes your personal data from our active systems within 45 days of the request. Backup copies, where they exist, expire within 30 days and are never used to restore a deleted account.
What we keep after deletion. Only the records listed above, without your name or email address, and a minimal record that a deletion was requested and completed. We do not use kept records for marketing.
We implement reasonable administrative, technical, and organizational measures designed to protect personal information, consistent with common practices for SaaS providers and Federal Trade Commission expectations that businesses take appropriate steps to safeguard data they hold—while recognizing that risk cannot be eliminated. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You should use strong passwords, protect your account credentials, and notify us if you suspect unauthorized access.
Depending on where you live and subject to applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information; to opt out of certain processing (such as targeted advertising or "sales" as defined by law); or to appeal a decision we make on a request. Laws such as the Connecticut Data Privacy Act (CTDPA) and the California Consumer Privacy Act (CCPA), as amended, may apply to our processing when statutory thresholds and scope requirements are met—we do not represent here that every provision applies to every user or that we meet every statutory definition in every case.
Connecticut residents. If the CTDPA applies to our processing of your personal data, you may have the rights described above (including appeal of certain denials). Under Connecticut law, eligible consumers may have rights such as confirming whether we process their personal data, accessing, correcting, deleting, or obtaining a copy of personal data, and opting out of certain processing (for example, targeted advertising, sale, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects), subject to statutory exceptions. Connecticut also authorizes its Attorney General to enforce the CTDPA; you may contact the Office of the Attorney General with questions about your rights under state law.
How to submit requests. To exercise rights, contact us through our Contact page or by email to info@techedanalyst.com. We aim to respond within 45 days. We may need to verify your identity before fulfilling a request. You may designate an authorized agent where permitted by law.
Appeals. If we deny your request, you can appeal: reply to our decision with "Appeal" in the subject line, or email info@techedanalyst.com. We decide appeals within 60 days and tell you in writing what we decided and why. If we deny your appeal, you may contact the Connecticut Attorney General at portal.ct.gov/AG (or your own state's attorney general).
Non-discrimination. We will not discriminate against you for exercising privacy rights permitted by law, except where permitted (for example, certain loyalty programs under California law).
California residents. If the CCPA applies, you may have the rights summarized above and additional disclosures regarding categories of personal information and sensitive processing. We describe collection and use in this policy; for a records request or opt-out where offered, use the contact method above. Where California law requires us to honor opt-out preference signals (such as the Global Privacy Control browser or extension signal) for "sale" or "sharing" of personal information, we will do so when those activities apply to our processing and the signal meets legal requirements.
Nevada residents. Nevada law allows certain consumers to opt out of the sale of covered information (as defined under Nevada law) to third parties for monetary consideration. We do not sell personal information for money as described in this policy; if our practices change in a way that triggers Nevada opt-out rights, we will provide a designated request address or mechanism as required.
Virginia residents (VCDPA). If the Virginia Consumer Data Protection Act applies, you may have rights to access, correct, delete, obtain a copy of, and opt out of certain processing of your personal data, subject to statutory exceptions. Contact us using the methods below.
Colorado residents (CPA). If the Colorado Privacy Act applies, you may have similar rights including appeal of certain denials. Contact us using the methods below.
Global Privacy Control (GPC). We do not sell personal information or share it for cross-context behavioral advertising. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any such sale or sharing, should those activities ever apply to our processing.
EEA, UK, and Swiss residents. If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under applicable data protection law: (a) Access — request a copy of the personal data we hold about you; (b) Rectification — request correction of inaccurate or incomplete data; (c) Erasure — request deletion of your data where no legitimate ground for retention exists; (d) Restriction — request that we limit processing of your data in certain circumstances; (e) Portability — receive your data in a structured, commonly used, machine-readable format; (f) Objection — object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, contact us using the details in the Contact section. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
Opt-out of sale or sharing (where applicable). We do not sell personal information for money. If we engage in activities that constitute a "sale" or "sharing" of personal information for cross-context behavioral advertising under state law, we will provide a compliant mechanism (such as a link or toggle) and honor opt-out signals where required.
We may send transactional messages (such as account verification, receipts, security alerts, and service updates) as needed to operate the Services. Where we send commercial or promotional emails, we will identify the message as an advertisement where required, include accurate header information, and provide a way to opt out of future marketing messages. Opt-out does not apply to essential non-promotional notices. You can also use contact preferences or links in our emails where available.
The Services are for adults acting for a business and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.
We operate in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the U.S. and other countries where our providers operate, which may have different data protection rules than your country.
We offer the Services to businesses in the United States, and we and our providers process data in the United States. We do not currently offer data transfer agreements, such as the EU Standard Contractual Clauses or the UK International Data Transfer Agreement. If you are located outside the United States, please contact us before using the Services.
If we experience a security incident that requires notification under applicable law (including Connecticut's breach-notification framework for certain categories of computerized data), we will provide notices in accordance with those requirements, which may include notifying affected individuals, regulators, or others as prescribed. Where Connecticut law applies, we notify affected residents without unreasonable delay and no later than 60 days after discovering the breach, and notify the Connecticut Attorney General no later than we notify residents.
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, if changes are material, provide additional notice as appropriate (for example, by email or in-product notice).
For privacy questions or requests, use our Contact page, or email info@techedanalyst.com.
This Privacy Policy explains how we handle personal information. It does not create contractual rights beyond what applicable law provides, and it is not legal advice for your business. If your business has sector-specific obligations (for example, HIPAA or GLBA), check with your own advisor before putting that data into the Services (see Terms of Service §9a).