Privacy Policy

Last updated: September 2025

This privacy policy explains how Piper Morgan collects, uses, and protects your personal information when you visit our website and subscribe to our newsletter.

Information We Collect

Newsletter Subscription

When you subscribe to our newsletter, we collect:

  • Email address: Required to send you newsletter content
  • Consent timestamp: Records when you provided GDPR consent
  • Signup source: Tracks which page you subscribed from
  • IP address: Collected automatically by our email service provider

Website Analytics

We use web analytics to understand how visitors use our site:

  • Pages visited and time spent on site
  • Referring websites and search terms
  • Device and browser information
  • General location (country/city level)

We do not use Google Analytics or other third-party tracking services that create detailed user profiles.

How We Use Your Information

Newsletter Communications

We use your email address to:

  • Send weekly newsletter content about AI-powered product management
  • Share methodology insights and building-in-public updates
  • Notify you about new features or significant site updates
  • Send double opt-in confirmation emails (required by law)

Website Improvement

We use aggregated analytics data to improve our content and user experience. This data cannot be used to identify individual users.

Data Sharing and Third Parties

Email Service Provider

We use ConvertKit to manage our newsletter subscriptions. ConvertKit is GDPR-compliant and processes your data according to their privacy policy:

  • Your email and consent data are stored on ConvertKit's secure servers
  • ConvertKit may process data in the United States under appropriate safeguards
  • You can review ConvertKit's privacy policy at: https://convertkit.com/privacy

Website Hosting

Our website is hosted on GitHub Pages, which may collect basic server logs including IP addresses and request information. GitHub is GDPR-compliant and you can review their privacy policy at: GitHub Privacy Statement.

Important: We never sell, rent, or share your email address with third parties for marketing purposes.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Access and Portability

You can request a copy of all personal data we hold about you.

Rectification

You can ask us to correct any inaccurate personal data.

Erasure ("Right to be Forgotten")

You can request that we delete your personal data.

Withdraw Consent

You can withdraw your consent at any time by unsubscribing from our newsletter.

Object to Processing

You can object to how we process your data for marketing purposes.

To exercise any of these rights: Contact us at privacy@pipermorgan.ai or use the unsubscribe link in any newsletter email.

Data Security

We implement appropriate security measures to protect your personal information:

  • All data transmission is encrypted using HTTPS
  • Email data is stored with ConvertKit using industry-standard encryption
  • We regularly review and update our security practices
  • We limit access to personal data to authorized personnel only

Data Retention

Newsletter Data

We retain your email address and consent data until you unsubscribe or request deletion.

Analytics Data

Website analytics data is retained for up to 2 years for site improvement purposes.

Legal Requirements

We may retain certain data if required by law or to resolve disputes.

Cookies and Tracking

Our website uses minimal cookies and tracking:

  • Essential cookies: Required for basic website functionality
  • No advertising cookies: We do not use cookies for advertising or detailed user tracking
  • No third-party trackers: We do not embed social media widgets or advertising networks

International Data Transfers

Your data may be processed in the United States by our service providers (ConvertKit, GitHub). These providers comply with appropriate data protection safeguards:

  • Standard Contractual Clauses (SCCs) for GDPR compliance
  • Industry-standard security and privacy practices
  • Regular privacy and security audits

Children's Privacy

Our website and newsletter are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. When we make significant changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Notify newsletter subscribers of significant changes
  • Post the updated policy on our website

Contact Us

If you have questions about this privacy policy or how we handle your personal information, please contact us:

Email: privacy@pipermorgan.ai

Website: https://pipermorgan.ai

Response Time: We aim to respond to privacy inquiries within 7 business days