Privacy

Last updated October 28, 2026

Who is responsible

Caitlin Sullivan, AI Customer Research, c/o GAM, Pappelallee 64, 10437 Berlin, Germany. Email: caitlin@aicustomerresearch.com. I’m the controller for the personal data this site collects.

The short version

No analytics, no ad trackers, and this site sets no cookies of its own.
I only collect what you type into a form: your email address and your role.
I never sell your data or share it for advertising.

Visiting the site

The site is hosted by Vercel Inc. (USA). When you load a page, Vercel’s servers log technical data such as your IP address, browser and the page you asked for, so the site can be delivered and protected from abuse. Videos are also served from Vercel. Legal basis: my legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Newsletter signup

Newsletter signup boxes are an embed from Substack Inc. (USA). What you enter goes straight to Substack, and Substack may set cookies inside the embed. Substack’s privacy policy applies. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing.

Free tools, sessions and waitlists

Signup forms for free tools and recorded sessions send your email address and role to a Google Sheet that only I can access, run on Google LLC (USA) services. I use them to send you what you signed up for and, if you ask, to add you to the newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR). I keep them until you ask me to delete them.

Buying a kit or course

Purchases go through Paddle.com Market Ltd (UK), the merchant of record. Paddle collects your payment and billing details under its own privacy policy. I receive your name, email address, country and what you bought, so I can give you access and support. I never see your card details. Legal basis: performing our contract (Art. 6(1)(b) GDPR). I keep purchase records as long as German tax law requires, usually up to 10 years.

Courses and kit downloads are delivered on my own platform at learn.aicustomerresearch.com, hosted on Vercel like this site. Sign-in runs on Clerk Inc. (USA): when you buy, Clerk emails you an invitation, and each time you sign in it emails you a one-time code. Clerk stores your email address, your sign-in history and which courses you have access to. The platform also saves which lessons you’ve marked as done. Legal basis: performing our contract (Art. 6(1)(b) GDPR).

Some lessons have boxes where you can type answers. What you type is saved in the course platform’s database, run by Neon Inc. (USA) in its data center in Frankfurt, Germany, so you can come back to it and export your plan (legal basis: performing our contract, Art. 6(1)(b) GDPR). I also read these answers without your name or email, to see what students are working on and improve the course (legal basis: my legitimate interest in improving the course, Art. 6(1)(f) GDPR). I never publish them. Answers are kept as long as you have an account. You can object, or ask me to delete your answers, at any time by emailing caitlin@aicustomerresearch.com.

Claude Code for Customer Insights is sold on Maven. If you follow a link there, Maven’s privacy policy applies.

Transfers outside the EU

Vercel, Substack, Google, Clerk and Neon are based in the USA. Where they’re certified under the EU-US Data Privacy Framework, transfers rely on that; otherwise on the EU Standard Contractual Clauses. The UK, where Paddle is based, has an EU adequacy decision.

Your rights

You can ask me for a copy of your data, or to correct, delete or restrict it, or to move it to another service. You can object to processing based on legitimate interest, and withdraw consent at any time without affecting what happened before. Email caitlin@aicustomerresearch.com and I’ll reply within a month.

You can also complain to a data protection authority. Mine is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If the site starts using a new service that handles your data, I’ll update this page first.