Privacy Statement
Effective: October 24, 2026
This statement covers the payortransparency.com website and the app at app.payortransparency.app (together, the Platform), both operated by Unified Web. It says what personal information the Platform collects, what it is used for and who receives it.
1. This website
There is no account and no form on this website. Nothing on its pages requests a name, an email address, a postal address, an employer or any other detail about a reader, so no such detail is received through it.
No analytics product runs on this website. There is no tag manager, no advertising pixel, no session recorder and no third-party script of any kind on its pages. The typefaces are served from this site rather than fetched from a font provider, so loading a page here does not tell a third party that the visit happened.
No cookie is set by this website. There is no consent banner on its pages because there is no cookie to consent to.
The website is served through a content delivery network. Request logging on that network is switched off, so no record of which address asked for which page is kept on this side. Some images are served by Sanity, the content platform the site is built from. Both have to handle each request in order to answer it, and what their operators do in the course of that is governed by their own terms rather than by this page.
Some links lead off this website, including the booking link in the page header and the sources named beside the content. Those destinations are run by other people, following one is a choice, and what happens after that is governed by the terms of the site a reader lands on.
2. Personal information the app collects
Account details. An email address, a name if one is given, the workspace a person belongs to and their role in it, and whether they sign in with Google or with a code sent by email.
Subscription details. The plan and code bundles a workspace holds, their status, and the reference numbers our payment processor, Stripe, uses for them. Card details are entered on Stripe’s own checkout page and never reach us.
Use of the app. The questions people put to the app and the answers it gives, the research and web pages they save, their email and notification choices, and records of the exports they make.
Other email addresses. The address of anyone a user invites to a workspace or sends a shared insight to, and of anyone who signs up for the Round 2028 email digest, whether or not that person uses the app, along with whether each digest sign-up has been confirmed.
Email records. A record of each email the app sends and the address it went to, except the emails that carry sign-in codes and those that ask a digest sign-up to be confirmed.
Undeliverable addresses. An email address that bounced for good, or whose owner reported an email from the app as spam, kept so the app stops sending to it.
Technical information. IP addresses and request details, recorded in the app’s security and application logs.
Google Drive, if connected. The Google account’s email address and an encrypted token that lets the app save exports to that person’s Drive, limited to the files the app creates.
The app does not ask for protected health information, precise geolocation, biometric data or financial account numbers, and the Terms of Service forbid entering patient information.
3. How it is used
Personal information is used to sign people in, run their workspace, bill the subscription, answer their questions, send sign-in codes, the email they have chosen to receive and the invitations and shared insights they ask the app to send, and keep the Platform secure. An address signed up for the Round 2028 email digest is used to ask its owner to confirm the sign-up and, once it is confirmed, to send the digest. Each digest carries a link to unsubscribe.
4. Who receives it
We do not sell personal information and we do not share it for advertising. Neither this website nor the app uses analytics or advertising cookies, so there is nothing to opt out of. The app sets only the cookies that keep a person signed in, and short-lived cookies that hold the state of a sign-in or of a Google Drive connection while it is under way.
Personal information goes only to the service providers that run the Platform, to Link when it is the merchant of record for a purchase, to the people a user chooses to invite or share with, or where the law requires it. When a user invites someone to a workspace or sends someone a shared insight, the app emails that person for them. Amazon Web Services (AWS) hosts the Platform, handles sign-in, sends the app’s email and keeps the list of Round 2028 digest sign-ups. Stripe processes payments, and for a purchase made through Stripe Managed Payments, Link (operated by Stripe) is the merchant of record and handles the payment, receipts, invoices, tax and refunds; both receive the buyer’s name, email address, billing address and payment details under their own privacy terms. A buyer can ask Link to delete their data; Stripe then cancels the subscriptions they bought through Stripe Managed Payments and tells us, and the app closes its record of that purchase. Google handles sign-in for people who choose it, and Drive exports for people who connect it. Anthropic provides the AI model that writes the app’s answers and summaries, and receives the questions, data and saved pages they are written from.
5. Your choices
Anyone can ask what personal information we hold about them, ask for a copy of it, ask us to correct it or ask us to delete it, and nobody is treated differently for asking. Write to billing@payortransparency.com from the email address on the account or, for someone without an account, from the address the app holds. How long each kind of information is kept is set out on the Security page.
Questions about this statement go to billing@payortransparency.com, or through the booking link in the page header. If any of this stops being true, this statement changes and the effective date above changes with it.