This policy governs the data boundaries of Wenboom. In a digital landscape heavily polluted by aggressive data-harvesting SaaS architectures, we maintain an uncompromising principle: minimal data collection, absolute context isolation. We treat your operational data with the same technical rigor we apply to our production server infrastructure.
1. Architecture & Data Collection Philosophy
Wenboom operates on a static-first architecture with minimal backend services. Our public content—blueprints, technical reports, JSON payload schemas, and architecture diagrams—is served as pure static files via Vercel's global CDN. We do not maintain server-side user relational databases, and we do not capture, proxy, or cache your proprietary business configurations, automated schema matrices, or internal API access keys.
The only backend services we operate are: (a) Vercel Serverless Functions for email subscription and unsubscribe endpoints, (b) Vercel KV (Upstash Redis) for storing subscription metadata, and (c) Resend for email delivery. These services process only the data explicitly described in this policy.
2. Information We Collect
We collect only the minimum information necessary to operate our services:
- Email address — provided voluntarily when you subscribe to our blueprint delivery list. Stored in Vercel KV with the key prefix
sub:. - Subscription metadata — subscription timestamp, sent drip email IDs (to prevent duplicate sends), and unsubscription status. Stored alongside your email in Vercel KV.
- Aggregate analytics data — anonymized page views, session duration, and referral sources via Google Analytics (GA4) with forced IP anonymization enabled. No personally identifiable information (PII) is collected or stored.
We do not collect: names, phone numbers, physical addresses, payment information, browsing history across other sites, or any data not explicitly listed above.
3. How We Use Your Information
Your information is used exclusively for the following purposes:
- Email delivery — sending our 5-email drip sequence and weekly technical briefing to subscribed users.
- Duplicate prevention — tracking sent drip email IDs to ensure no user receives the same email more than once.
- Unsubscribe processing — marking inactive records to ensure no further automated emails are sent.
- Aggregate analytics — understanding which content is most useful to our audience and optimizing content relevancy. All data is anonymized and aggregated.
We do not sell, rent, lease, or share your email address or any personal data with any third party for marketing purposes. We do not use your data for advertising, profiling, or any purpose not described in this policy.
4. Email Subscription & Data Retention
When you subscribe, your email address and metadata are stored in Vercel KV (Upstash Redis). Your data remains stored as long as your subscription is active. Upon unsubscription, your record is marked as inactive but retained to prevent accidental re-subscription and to comply with legal record-keeping requirements.
You may request permanent deletion of your data at any time by contacting us through the channels listed on our About Alex page. Upon verified request, your email address and all associated metadata will be permanently deleted from our systems within 30 days.
5. Third-Party Services
Wenboom utilizes the following third-party service providers, each operating under their own independent privacy policies:
- Vercel — static hosting, global CDN, and serverless function execution. Data processed: website traffic logs (anonymized), serverless function invocations.
- Upstash (Vercel KV) — Redis-based key-value storage for subscription metadata. Data stored: email addresses and subscription metadata.
- Resend — email delivery service. Data processed: email addresses and email content for delivery.
- Google Analytics (GA4) — aggregate website analytics with forced IP anonymization. Data processed: anonymized page views, session duration, referral sources.
- GitHub — source code hosting and version control. No user data is stored in our public repository.
We strongly recommend reviewing the privacy policies of these third-party providers before using our services. We are not responsible for the data practices of external platforms.
6. Affiliate Links & External Redirects
Wenboom contains affiliate links to tools in our 7-core stack: Make.com, n8n, Clay, Smartlead, Voiceflow, Bland.ai, and ActiveCampaign. These links route through clean static redirect pages at /links/[tool].html. When you click these links and subsequently sign up for or purchase services, the vendor may set their own attribution cookies and process your data according to their privacy policies.
We do not receive, process, or store any data from these external platforms. Your interaction with affiliate vendors is governed entirely by their respective terms and privacy policies.
7. Cookies & Tracking
Our use of cookies and tracking technologies is described in detail in our Cookie Policy. In summary: we use Google Analytics for aggregate, anonymized measurement; affiliate vendors may set their own attribution cookies; and we use minimal first-party storage for essential interface functionality. No cross-site tracking, no advertising networks, no data brokerage.
8. Your Rights
Depending on your jurisdiction (including GDPR for EU residents and CCPA for California residents), you may have the following rights regarding your personal data:
- Right to Access — request a copy of the personal data we hold about you.
- Right to Deletion — request permanent deletion of your personal data from our systems.
- Right to Rectification — request correction of inaccurate personal data.
- Right to Restrict Processing — request restriction of how we process your data.
- Right to Data Portability — request your data in a machine-readable format.
- Right to Object — object to processing of your personal data.
- Right to Withdraw Consent — unsubscribe from email communications at any time.
To exercise any of these rights, contact us through the channels listed on our About Alex page. We will respond to verified requests within 30 days.
9. International Data Transfers
Wenboom operates globally. Our infrastructure (Vercel, Upstash, Resend, Google) may process data in the United States and other jurisdictions. If you are accessing our services from the European Economic Area (EEA) or other regions with data protection laws, please note that your data may be transferred to and processed in jurisdictions that may not have equivalent data protection laws. We only engage with service providers that maintain appropriate data protection safeguards, including Standard Contractual Clauses (SCCs) where applicable.
10. Children's Privacy
Wenboom is intended for professional, business, and educational use by adults. We do not knowingly collect personal data from children under the age of 16 (or the applicable age of digital consent in your jurisdiction). If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete that data promptly.
11. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: HTTPS encryption for all traffic, minimal data collection principle, restricted access to backend services, regular security reviews of our infrastructure, and no storage of sensitive data (passwords, payment information, API keys) in our systems.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
12. Policy Updates
This privacy policy remains consistent with the 10-year evolutionary lifecycle of our project. Any adjustments required by shifts in international compliance frameworks (such as updated GDPR or CCPA structures) or changes to our data processing practices will be updated transparently on this page. Material changes will be reflected by updating the "Last updated" date at the top of this page. Your continued use of our services after such changes constitutes acceptance of the updated policy.
13. Contact & Questions
If you have questions about this privacy policy, our data practices, or wish to exercise your data rights, contact us through the channels listed on our About Alex page.