Privacy policy | jack gpt

This policy explains how itsjackgpt.com collects, uses, stores and shares personal information, and the choices you have. It applies to this website, the jack gpt email list and waitlist, and the automated Instagram DMs that send people to this site. It's written in plain English on purpose. If anything is unclear, email hello.itsjackgpt@gmail.com.

1. Who we are

This site and the jack gpt brand are run by Jack Ryan, an individual based in Sydney, New South Wales, Australia ("we", "us", "I"). The site is run personally and is separate from Klyr AI Pty Ltd, the AI consultancy I founded. Klyr has its own privacy policy for its own clients.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We do this as a matter of good practice, whether or not the Act legally applies to us. Where the New Zealand Privacy Act 2020 applies to how we handle a New Zealander's information, we comply with it too.

2. What we collect

Information you give us

Email address, when you join the email list or the 30-day challenge waitlist, or send it to us in an Instagram DM to get a guide.
Waitlist survey answers, if you choose to answer them: what you want to build with AI, your experience level with AI, and whether you would consider paying for a challenge. These questions are optional and don't ask for sensitive information.
Messages you send us by email or DM, and anything you choose to include in them.

Information collected through Instagram

If you comment a keyword on one of our posts or message us, our automation tool (ManyChat) receives your Instagram username, public profile details, the comment or message, and the time it was sent, so it can reply to you with the guide.

Information collected automatically

Website analytics. We use Cloudflare Web Analytics to count visits and see which pages are read. It is privacy-first: it does not use cookies, does not fingerprint your device, and does not track you across other websites. It records things like the page visited, the referring site, your browser type and your approximate country.
Server and security logs. Our host, Cloudflare, processes technical data such as your IP address, browser and device details, and the time of your request. This is needed to deliver the site and protect it from abuse and attacks.
Email engagement. Our email provider (Kit) records whether our emails are delivered, opened and clicked. This helps us know which guides are useful and keep the list healthy. Some email apps block this, and that's fine.

We don't knowingly collect sensitive information (such as health, racial or ethnic origin, political or religious views, or sexual orientation). Please don't send it to us. If you do, we will delete it unless we need it to respond to you.

3. Why we collect it

To send you the guide, resource or email you asked for.
To send the jack gpt email newsletter and, if you joined the waitlist, news about the 30-day challenge, including any launch or early price.
To understand demand for a paid challenge and work out what it should cover. Survey answers are mostly looked at in aggregate.
To reply to your messages and requests.
To run, secure and improve the site, and to stop spam, fraud and abuse.
To meet our legal obligations and to establish, exercise or defend legal claims.

We won't use your information for a purpose you wouldn't reasonably expect, unless you agree or the law allows or requires it.

4. Email marketing and consent

We only email people who have signed up or otherwise agreed to hear from us. Every marketing email identifies us as the sender and includes a working unsubscribe link. Unsubscribe requests are actioned straight away, and always within 5 working days, in line with the Spam Act 2003 (Cth) and New Zealand's Unsolicited Electronic Messages Act 2007.

After you unsubscribe, we may keep your email address on a "do not email" list so we don't contact you again by mistake.

5. Who we share it with

We don't sell, rent or trade your personal information, and we don't share it with advertisers. We share it only with the service providers who help us run things, and only so they can provide that service to us:

Cloudflare: website hosting, security, domain and analytics.
Kit (ConvertKit): email list, waitlist and email delivery.
ManyChat: automated Instagram DMs.
Meta (Instagram): the platform the DMs and comments happen on. Meta's own privacy policy applies to your use of Instagram.
Google (Gmail): our email inbox, if you email us.

If we start using a payment provider for paid products, we'll add it here. We will never see or store your full card details.

We may also disclose information if the law requires it, to protect our rights or the safety of any person, or to a professional adviser (such as a lawyer or accountant) who is bound by confidentiality. If the jack gpt brand or site is ever sold or transferred, the email list may be transferred to the new owner, who must handle it in line with this policy.

6. Overseas storage

Most of these providers store or process data outside Australia and New Zealand, mainly in the United States, and may use data centres in other countries. We choose established providers with recognised security and privacy practices. By using the site, joining the list or messaging us, you acknowledge your information may be handled overseas, where privacy laws may not give the same protection as Australian or New Zealand law. We still take reasonable steps to make sure our providers protect it.

7. Cookies and similar technology

This site does not use advertising cookies, tracking pixels or cross-site tracking. Our analytics are cookieless. The site stores one small, temporary setting in your browser's session storage to make page transitions smooth. It contains no personal information and disappears when you close the tab. Cloudflare may set a strictly necessary security cookie to protect the site from bots and attacks.

If we ever add advertising or retargeting tools, we will update this policy first and ask for your consent where the law requires it.

8. How we keep it secure

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, change or disclosure. These include using reputable providers, securing our accounts with strong passwords and two-factor authentication where available, limiting who can access the data, and encrypting the site with HTTPS. No system is completely secure, so we can't guarantee security. If a data breach is likely to cause you serious harm, we will tell you and, where required, the regulator.

9. How long we keep it

Email list and waitlist details: while you're subscribed. If you unsubscribe, we keep only what we need for the "do not email" list.
Survey answers: while you're on the waitlist, or until we no longer need them to plan the challenge.
Instagram automation data: deleted or de-identified when no longer needed, and in any case within 24 months of your last interaction.
Messages: as long as needed to deal with your request and any follow-up.

When we no longer need personal information, we delete or de-identify it, unless the law requires us to keep it.

10. Your rights and choices

Unsubscribe at any time using the link at the bottom of any email.
Access the personal information we hold about you.
Correct information that's wrong, out of date or incomplete.
Delete your information. We'll do this unless we have a legal reason to keep it.
Stay anonymous. You can read the whole site and every guide without giving us any personal information.

To make a request, email hello.itsjackgpt@gmail.com. We may need to confirm your identity first. We'll respond within 30 days and won't charge you for making a request. If we refuse a request, we'll tell you why and how to complain.

If you're in the UK or European Union, you also have the right to object to or restrict how we use your information and to ask for a copy in a portable format. We rely on your consent to send marketing emails (which you can withdraw at any time), and on our legitimate interests to run, secure and improve the site.

11. Age

This site is general-audience content, but the email list, waitlist and any paid products are for people aged 18 or over. We don't knowingly collect personal information from children. If you believe a child has given us their details, email us and we will delete them.

12. Complaints

If you have a privacy complaint, email hello.itsjackgpt@gmail.com with the details. We'll acknowledge it within 7 days and aim to resolve it within 30 days. If you're not satisfied with our response, you can complain to:

In Australia, the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.
In New Zealand, the Office of the Privacy Commissioner: privacy.org.nz.

13. Changes to this policy

We may update this policy as the site changes, for example when paid products launch. The "last updated" date at the top will always show when it last changed. If a change significantly affects how we use information we already hold, we'll let subscribers know by email before it takes effect.

14. Contact

Jack Ryan, jack gpt, Sydney NSW, Australia. Email: hello.itsjackgpt@gmail.com.