Privacy

Last updated October 6, 2026

Who is responsible

Caitlin Sullivan, AI Customer Research, Germany. Email: caitlin@aicustomerresearch.com. I’m the controller for the personal data this site collects.

The short version

• No analytics, no ad trackers, and this site sets no cookies of its own.
• I only collect what you type into a form: your email address and your role.
• I never sell your data or share it for advertising.

Visiting the site

The site is hosted by Vercel Inc. (USA). When you load a page, Vercel’s servers log technical data such as your IP address, browser and the page you asked for, so the site can be delivered and protected from abuse. Videos are also served from Vercel. Legal basis: my legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Newsletter signup

Newsletter signup boxes are an embed from Substack Inc. (USA). What you enter goes straight to Substack, and Substack may set cookies inside the embed. Substack’s privacy policy applies. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing.

Free tools, sessions and waitlists

Signup forms for free tools and recorded sessions send your email address and role to a Google Sheet that only I can access, run on Google LLC (USA) services. I use them to send you what you signed up for and, if you ask, to add you to the newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR). I keep them until you ask me to delete them.

Buying a kit or course

Purchases go through Paddle.com Market Ltd (UK), the merchant of record. Paddle collects your payment and billing details under its own privacy policy. I receive your name, email address, country and what you bought, so I can give you access and support. I never see your card details. Legal basis: performing our contract (Art. 6(1)(b) GDPR). I keep purchase records as long as German tax law requires, usually up to 10 years.

Courses and kit downloads are delivered on my own platform, hosted on Vercel like this site. It uses your email address to give you access to what you bought. Legal basis: performing our contract (Art. 6(1)(b) GDPR).

Claude Code for Customer Insights is sold on Maven. If you follow a link there, Maven’s privacy policy applies.

Transfers outside the EU

Vercel, Substack and Google are based in the USA. Where they’re certified under the EU-US Data Privacy Framework, transfers rely on that; otherwise on the EU Standard Contractual Clauses. The UK, where Paddle is based, has an EU adequacy decision.

Your rights

You can ask me for a copy of your data, or to correct, delete or restrict it, or to move it to another service. You can object to processing based on legitimate interest, and withdraw consent at any time without affecting what happened before. Email caitlin@aicustomerresearch.com and I’ll reply within a month.

You can also complain to a data protection authority. Mine is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If the site starts using a new service that handles your data, I’ll update this page first.