Privacy Policy

Last updated: July 5, 2026

This Privacy Policy explains how The Equation Agency LLC, a Florida limited liability company founded by Victor J. Rosario ("we," "us"), collects, uses, and protects your information when you use the coaching platform at victorjrosario.com (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

• Account information: your email address and a securely hashed version of your password. We never store your password in plain text.
• Engagement details: the role, goal, and north-star metric you provide so the coach can tailor its guidance.
• Coaching conversations: the messages you send to, and receive from, the AI coach.
• Billing information: processed by Stripe. We store a Stripe customer/subscription identifier and your subscription status. We do not receive or store your full card number.
• Technical data: limited request metadata (such as IP address) used for security and rate limiting.

2. How we use your information

• To provide, personalize, and maintain continuity of your coaching across devices and sessions.
• To authenticate you and secure your account.
• To process payments and manage your subscription.
• To protect the Service from abuse through rate limiting and monitoring.

3. AI processing

Coaching is delivered by an AI system trained on Victor's methodology. To generate responses, the content of your coaching conversations and your engagement context are transmitted to our AI provider, Anthropic, PBC, which processes them to return a reply. We send only what is needed to produce your coaching response. Anthropic's handling of API data is governed by its own terms and privacy commitments for business/API customers.

4. Where your data is stored

Account data, engagement details, and conversation history are stored in a Cloudflare D1 (SQLite) database operated on Cloudflare's infrastructure. Secrets and API keys are held as encrypted environment variables and are never exposed to your browser.

5. Sharing

We do not sell your personal information. We share data only with the service providers needed to run the Service — Cloudflare (hosting and database), Stripe (payments), and Anthropic (AI processing) — and only as necessary to provide the Service, or when required by law.

6. Data retention

We retain your account and conversation history for as long as your account is active so you have continuity across sessions. You may request deletion of your account and associated data by contacting us at the address below; we will delete it except where we are required to retain certain records (for example, billing records) by law.

7. Security

We use HTTPS everywhere, hash passwords with PBKDF2, issue session tokens in httpOnly, Secure, SameSite cookies, apply a strict Content Security Policy, and rate-limit sensitive endpoints. No system is perfectly secure, but we work to protect your data using current best practices.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details below.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about privacy or data requests: privacy@victorjrosario.com.