Privacy Policy

1. Information we collect

• Account details — your name and email address. If you sign in with Google, we receive basic Google account information (name, email address, and profile image) to create and identify your account. We do not receive your Google password.
• Business profile — information you provide about your business, such as company name, phone, website, business type, location, and time zone.
• Portal activity — messages you exchange with us, documents you upload, bookings and session times, hours purchased and used, and project roadmap information.
• Meeting recordings & transcripts — if you join a recorded video session, we store the recording and a transcript. You are asked to consent before your first recorded session.
• Payment information — payments are processed by Stripe. We do not receive or store your full card number; we keep a record of the transaction (amount, date, status).
• Technical & session data — cookies used to keep you signed in, plus standard server logs (such as IP address and browser type) used for security and reliability. We do not use advertising or cross-site tracking cookies.

2. How we use your information

• Create your account and sign you in securely.
• Provide the Service — messaging, documents, scheduling, hours, roadmap, and video sessions.
• Process payments for hours you purchase.
• Keep an accurate record of our work together, including session recaps and transcripts.
• Communicate with you about your account or engagement.
• Maintain security, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not share it for third-party advertising.

3. AI and automated processing

We use third-party artificial intelligence to transcribe recorded video sessions, and we may use AI tools to help us draft materials such as session recaps or documents. AI-generated output can contain errors and is always reviewed by a person before we rely on it.

We do not use your personal information or content to train AI models, and we do not permit our service providers to use your information to train their models except as necessary to provide the Service. We do not make legally significant decisions about you solely by automated means.

4. Health information (no HIPAA / no PHI)

GLP1Consultant provides business and operations consulting to companies. We are nota health care provider, a HIPAA “covered entity,” or a “business associate,” and the Service is not intended to collect protected health information (PHI) or individual patient medical records. Please do not submit PHI or patient health records through the Service. We do not knowingly collect “consumer health data” as defined by state health-privacy laws; if you believe you have shared such information, contact us and we will delete it.

5. Service providers we use

We rely on trusted providers to operate the Service. They process your information only to provide these features, under their own terms:

• Supabase — authentication, database, and file storage.
• Google — optional “Sign in with Google” authentication.
• Daily — video meetings, recording, and transcription.
• Stripe — payment processing.

We may also disclose information if required by law, to protect our rights or safety, or in connection with a business transfer.

6. Data retention & deletion

We keep your information for as long as you have an account or as needed to provide the Service and meet legal, tax, and accounting obligations. You may request deletion of your account and associated data at any time by emailing privacy@glp1consultant.com with the subject “Delete my account.” We will action verified requests within a reasonable time (typically within 30 days), after which residual copies are purged from routine backups on our normal backup cycle. We may retain limited records where required by law.

7. Security

We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise any of these, email privacy@glp1consultant.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

9. Children

The Service is intended for businesses and adults. It is not directed to children under 18, and we do not knowingly collect information from them.

10. Where we operate

We are based in the United States and our providers may process and store information in the United States. If you access the Service from outside the U.S., you understand your information will be processed there.

11. SMS / text message notifications

We offer optional SMS/text message notifications to the operators of a business account (our own consultants) about activity in their client portal — for example, when a client sends a message, requests a session, submits an inquiry through our website, signs an agreement, or a meeting transcript becomes available. These are transactional account/operational notifications. We do not send marketing or promotional text messages, and we do not send SMS to clients or other consumers.

Opt-in. A consultant opts in by providing their own mobile phone number for account notifications in their account/notification settings and affirmatively agreeing to receive these texts. Consent to receive SMS is not a condition of purchasing or using the Service.

Frequency & rates. Message frequency varies based on account activity. Message and data rates may apply.

Opt-out & help. Reply STOP to any message to unsubscribe at any time; reply HELP for help. You may also email privacy@glp1consultant.com.

Mobile phone numbers and SMS consent collected for these notifications are used only to deliver them. Text messaging originator opt-in data and consent are not shared with any third parties, and are never sold, rented, or shared for third-party marketing.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we'll revise the “Last updated” date above; material changes may be communicated through the Service.