Privacy Policy
This policy explains what information MycoAI collects when you visit mycoai.net, send a note through the contact form, or book a call — how that information is used, who processes it, and the choices and rights you have. Plain language, no dark patterns — the same standard I hold my client work to.
The short version. If you contact me, I collect the details you submit (name, email, what you need, your message) so I can reply and scope your project. The site uses Google Analytics to understand traffic trends, and bookings/payments run through Google Calendar and Stripe. I don't sell your data, ever. Email mycoai@mycoai.net anytime to access or delete what I hold.
1. Who is responsible for your data
This website is operated by Guy Richard Stewart, a sole proprietor doing business as MycoAI, based in Asheville, North Carolina, United States ("MycoAI," "we," "us," or "I"). For any privacy question, I am the point of contact — see Section 13.
2. Information we collect
Information you give us directly
- Contact-form details — your name, email address, the discipline you need help with, and your message, submitted through the inquiry form.
- Booking details — when you schedule a call, the scheduling and (for paid consults) payment steps are handled by Google Calendar and Stripe; I receive your name, email, and the meeting details.
- Anything else you send — the content of emails, calls, or messages you initiate.
Information collected automatically
- Usage & device data — via Google Analytics 4: pages viewed, referring source, approximate (city-level) location derived from IP, browser and device type, and on-page events (e.g. clicking "book a call"). Used in aggregate to understand traffic trends. Analytics loads only after you first interact with the page (scroll, tap, or key press).
- Server logs — the site is hosted on GitHub Pages, which may process standard request logs (including IP address) to deliver and secure the site.
3. How we use your information
- To reply to your inquiry, hold the scoping/consult call, and scope and quote your project.
- To process a booking and, for paid consults, take a deposit (via Stripe).
- To measure and improve the website using aggregate traffic trends.
- To protect the site against spam, abuse, and security threats.
- To comply with legal and tax obligations.
We do not sell, rent, or trade your personal information, and we do not add you to a marketing list from a contact-form submission without your asking.
4. Legal bases for processing (GDPR)
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
- Performance of a request / pre-contract steps — to respond to your inquiry and scope work you initiated.
- Consent — for non-essential analytics cookies. You may withdraw consent at any time.
- Legitimate interests — for keeping the site secure and understanding aggregate usage, balanced against your rights.
- Legal obligation — where we must retain or disclose data to comply with the law.
5. Sharing & third-party processors
We share personal data only with the service providers needed to run the site and respond to you, each acting under their own terms:
- Web3Forms — relays contact-form submissions to our inbox (form processing).
- Google Analytics (Google LLC) — aggregate website traffic reporting.
- Google Calendar (Google LLC) — call scheduling.
- Stripe, Inc. — deposit payments for paid consults; card data is handled by Stripe and never touches this site.
- Google Fonts (Google LLC) — serves the site's web fonts; your browser's IP is visible to Google when fonts load.
- GitHub Pages (GitHub, Inc.) — hosts the website.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of MycoAI or others. Links to external sites (such as YouTube @MycoAI) are governed by their own privacy policies.
6. Cookies & analytics
The site uses a small number of cookies and similar technologies. Strictly necessary technologies keep the site working; Google Analytics cookies help us understand aggregate traffic and load only after your first interaction with the page. You can control cookies through your browser settings, and you can opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on.
7. Data retention
We keep inquiry and booking details only as long as needed to handle the matter and any resulting engagement, plus what tax and legal rules require, then delete or anonymize them. Aggregate analytics data is retained on a rolling basis per Google Analytics settings. You can ask us to delete your data sooner at any time.
8. Your privacy rights
Depending on where you live, you have some or all of the following rights over your personal information:
- Access — a copy of the personal data we hold about you.
- Correction — fix inaccurate or incomplete data.
- Deletion — ask us to erase your data ("right to be forgotten").
- Withdraw consent — for analytics, at any time.
- Portability — receive your data in a portable format (GDPR).
- Object or restrict — object to, or restrict, certain processing (GDPR).
- Non-discrimination — we will not treat you differently for exercising your rights (CCPA/CPRA).
California residents: we do not sell or "share" personal information as those terms are defined under the CCPA/CPRA. To exercise any right, email mycoai@mycoai.net and I will respond within the timeframe the applicable law requires. EEA/UK residents may also lodge a complaint with their local data protection authority.
9. Data security
The site is served over HTTPS, and personal data is held by reputable providers that maintain industry-standard safeguards. No method of transmission or storage is perfectly secure, but we work only with processors that take data protection seriously and keep what we collect to the minimum needed.
10. International data transfers
We operate from the United States, and our providers may process data in the U.S. or other countries. Where data is transferred from the EEA or UK, our providers rely on recognized transfer mechanisms (such as Standard Contractual Clauses) to protect it.
11. Children's privacy
This site is intended for professional and adult audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the site and its tools evolve. Material changes will be reflected in the "Last updated" date above. Continued use of the site after an update means you accept the revised policy.
13. How to contact us
This policy is provided for transparency and is not legal advice. It should be reviewed by qualified counsel before you rely on it for regulated activities.