Privacy

What the courses collect, why they collect it, who else handles it, and how to get a copy or have it deleted.

Effective November 13, 2026.

1. The short version

The courses are free and there is no payment information involved. To take one you give us an email address, and we record how far through the courses you have got. Signing up for a course also puts your email address on our email list, for free tools and invitations to free workshops. Every one of those emails has a one-click unsubscribe link. Beyond that, everything else is something you choose to do: save answers in the course tools, download your brand file or your Agent Kit, claim a certificate and put a name on it, or paste us a link to a post you made. We do not sell your data, and none of it goes to an advertising network.

2. Who we are

RunSimpler is a brand of Moonbound Consulting, LLC, an Illinois limited liability company. The courses are at learn.runsimpler.com. The company responsible for your personal data is Moonbound Consulting, LLC, registered at 333 W. Wacker Drive, Suite 2600, Chicago, IL 60606. In this policy, that is "we" and "us."

Privacy questions and requests go to tony@runsimpler.com, marked for the attention of Anthony Drummond, President.

This policy covers the courses at learn.runsimpler.com. The main website, runsimpler.com, has its own privacy policy.

3. What we collect

Held in our database for as long as your account exists:

• Your email address. You give it at sign-in. It is the only thing the courses require.
• Your enrollments. Which courses you have started and when.
• Your progress. Which lessons you have opened and completed, how far into a lesson video you got in seconds, which course assets you have opened, and which page of a PDF you were last on. This is what makes the resume button work.
• Your consent record. Your email address, the version of the terms you accepted, when you first accepted and when you last confirmed. We also record how you came to be on the course email list: that you joined by signing up, the date, and the version of the wording you saw. If you unsubscribe, we record that and the date.
• Links to your posts. The platform (LinkedIn or X) and the link, if you paste one back to us after sharing the course or your certificate to unlock the Agent Kit. We also keep which of the two you shared, when you pasted it, and whether our team could open it. Our team reads these links. We do not open or check them automatically.
• Your certificates, if you claim any. The credential id, whether it is public or private, the date it was issued and claimed, the course it is for, and the display name you chose. We also keep the history of any changes you make to that name.
• Your answers in the course tools. Whatever you type or choose in the tools, saved against your account: for example your avatar, your content pillars, your voice and brand colors, your hooks and your calendar, the free thing and booking link you send people to, and any client quotes you decide to write down. Each saved answer can contain free text, up to about 16 KB per entry, and web links. You decide what goes in. Please do not put in anything you would not want us to hold, such as private details about other people.
• Other people you list. Some tools ask for the names and LinkedIn profile links of people you want to keep an eye on: creators you read and competitors, plus the names of people you plan to ask for a recommendation. These people are not our users and may not know they are on your list. We store the name, link and your note exactly as you typed them. We do not contact them, do not visit the links, and do not show them to our team. Staff see only how many entries a student has saved in each tool, never what is in them.
• A record of the Agent Kit. Whether you unlocked it, when, and which of the two shares unlocked it. We also record which Agent Kit emails we sent you, and whether we held one back.

4. What we do not collect

• No password. The product has no password field and stores no password for your account.
• No payment details. The courses are free and there is no checkout.
• No photograph, and no name unless you type one in. You may type your own name for a certificate and in the tools, and names of other people in the tools lists described above.
• No check of your posts. We do not fetch the link you paste back to us, and we do not read the text of your post to give you the Agent Kit. We keep the link only.
• No advertising or cross-site tracking cookies, and no data sold or shared with an advertising network.
• No heatmaps or session recording.

5. How signing in works

You enter your email address and we send you a six-digit code. The code is valid for ten minutes. We store a hash of it, never the code itself. Sign-in requests and code attempts are rate limited by email address and by network address, which is what stops somebody working through codes or using the form to mail strangers.

Once you are in, your session lives in our database and your browser holds a session cookie for it. A session lasts up to thirty days.

6. Cookies and similar storage

The product sets these itself:

• A session cookie once you sign in, so you stay signed in.
• A short-lived signed cookie during sign-in, which carries the attempt from the email form to the code screen. It matches the ten-minute code lifetime.
• Browser storage on your own device for three conveniences: remembering which modules in the course menu you have expanded, keeping your lesson progress in step across your open tabs, and remembering which step of the share window you were on while you go to LinkedIn or X and come back (this one clears when you close the tab). None of it is sent to us from storage, and none of it identifies you.

Google Analytics sets its own cookies, and playing a lesson video sets YouTube cookies. Both are covered below.

We do not currently respond to browser "Do Not Track" signals. We do not track you across other websites.

7. Email

Email is sent through Resend, from mail.runsimpler.com. There are five kinds:

• Sign-in codes. Sent because you asked for one. These carry no unsubscribe link, because turning them off would lock you out of your own account.
• A welcome email the first time you start each course. It carries a one-click unsubscribe link and our postal address.
• Course email. Signing up for a course adds your email address to our course mailing list at Resend. We use the list to send free tools and invitations to free workshops. We do not ask you to tick a box first, and the notice beside the sign-up form says so. Every course email says why you are receiving it, carries a one-click unsubscribe link and our postal address, and unsubscribing takes effect immediately. If you unsubscribe, signing in again or enrolling in another course does not add you back.
• The Agent Kit unlock email. Sent right after we accept a post link from you, to tell you the kit is ready and where to download it. If a send fails we try again for up to 48 hours. It is a message about something you asked for, so like a sign-in code it carries no unsubscribe link. It does not advertise anything. We send it once per course.
• The post-certificate email. About an hour after you claim a certificate, we send one email about the certificate and the Agent Kit, to people on the course mailing list. We do not send it if you have already unlocked the kit, if you are not on the course mailing list, or if you have unsubscribed, and if we cannot confirm that you are still subscribed we hold it back rather than send it. It carries a one-click unsubscribe link and our postal address. We send it once per course, and only if the certificate was claimed in the last 48 hours, so it never arrives late.

We keep a short record of each Agent Kit email: the course, which of the two it was, and whether it was sent or held back and why (for example, because you had already unlocked the kit or had unsubscribed). That record is what stops a second send.

Unsubscribing from course email does not close your account or stop your sign-in codes or the Agent Kit unlock email. We honor an unsubscribe within ten business days at the outside, and in practice immediately. We do not add an unsubscribed address back to the list.

Why we email you. Sign-in codes and the other service messages are sent because you asked for them, to provide the course. For the course mailing list, we email you because you signed up and the notice beside the form told you that signing up joins the list. US law (the CAN-SPAM Act) allows this without asking first, on condition that we identify ourselves, include our postal address and honor every unsubscribe. It works the same way wherever you are. You can unsubscribe at any time with the link in any of these emails, and unsubscribing does not affect anything we sent before or your access to the courses.

8. Analytics

The courses use Google Analytics 4, a service from Google LLC. It records page views and a defined list of product events: sign-in requests and failures, lesson views and completions, module completions, asset opens, downloads and failed downloads, searches within the courses, share clicks, certificate claims, verification-page views and downloads, and clicks on the strategy call link. It loads once a page has finished loading, for every visitor, and there is no consent panel in front of it. We switch off Google Signals and ad personalization, and the Google Analytics cookie is set to last about 13 months. Google Analytics may also collect approximate location from your IP address, device and browser type, and how you arrived.

Every event in the product goes through one module, and that module is the enforcement, not a promise in a policy. It never sends:

• your email address, raw or hashed;
• a user id or a session id;
• a certificate id, because the verification page shows a name beside it;
• anything you typed: no search text, no share text, no lesson titles, no names.

The certificate verification page reports itself to Google Analytics under a masked path, never its real address. Searches report only whether there were results and how many, never the query.

Google acts as our processor and handles this data under its own terms. To opt out, you can install Google's browser add-on at tools.google.com/dlpage/gaoptout or block cookies in your browser. Nothing in the courses stops working if you do. You can also email us and ask us to stop.

9. Certificates, sharing and the Agent Kit

Finishing a course lets you claim a certificate. A private certificate carries no name. If you make it public, it gets a page at a public web address that shows the display name you chose, the course, the credential id, the date and a QR code that resolves back to that same address. That page is meant to be shared and is open to search engines.

You can change the name on it, and you can revoke it at any time, which makes it private and stops it being indexed. A revoked certificate and an id that never existed look identical to a stranger, so nobody can use the page to test whether a given person holds one.

Sharing the course or your certificate. A course can offer a bonus, the Agent Kit, when you share the course or your certificate on LinkedIn or X. The share window writes a draft post you can edit. It copies the text to your clipboard, and if you choose Open LinkedIn or Open X, your browser opens that site and the text goes to it in the web address. After that the post is between you and that platform and its terms apply to it. Pasting the link to your post back to us is what unlocks the kit.

When you paste a link we store it with your account (see section 3). Our team reads these links in a work list that shows your email address beside the link and nothing else about you, so that we can look at the post and reply to it. The work list can also show a short note from the team member and whether they engaged with the post or set it aside. We do not fetch the link ourselves. We never read the text of your post to decide whether to give you the kit. If you remove the post later, the link we hold stops working but the kit stays unlocked.

We may reshare some posts by using the platform's own repost button. We will not copy your words anywhere else without asking you.

Your brand file and your Agent Kit. You can download your brand file at any time. It is a text file, MY-BRAND.md, put together when you ask for it from the answers you saved in the course tools, and it includes the name you gave on your certificate. It leaves out the people lists unless you ask for them. The Agent Kit is a zip that we build when you press download, with your brand file placed inside it, and it never includes the people lists. We do not keep a copy of either file. Once downloaded they are on your device, and what you do with them is up to you. If you upload them to an AI service such as ChatGPT or Claude, that service gets what is in the file and handles it under its own terms and privacy policy. We have no control over what it does.

10. Who else handles your data

These are the companies in the path, and what each one sees. Each acts as our processor or service provider and handles the data under its own terms.

• Neon hosts the Postgres database, which holds everything in section 3.
• Vercel hosts the application and its server logs, and Vercel Blob stores the course files. Server logs typically include your IP address, the page requested, the time, and your browser and operating system.
• Upstash holds the rate-limit counters. The keys carry a hashed email address or a network address, never a readable email address.
• Resend sends the email, including the Agent Kit emails, and holds your address on the course mailing list while you are on it.
• Google Analytics receives the events described in section 8, with no personal identifier attached.
• YouTube serves the lesson videos. Playing one loads a YouTube player, which sets YouTube cookies and lets YouTube see your network address.
• Google Docs and Google Sheets host some of the course templates as copyable documents. Opening one sends you to Google, where Google's own terms and privacy policy apply to what you do there.
• Calendly runs the booking page behind the strategy call link. We pass nothing to it. If you click through, Calendly's own terms and privacy policy apply there.
• Where your post goes. When you use the share window, your browser sends your draft post to LinkedIn or X, which handle it under their own terms and privacy policies. We are not given what they hold.
• Any AI service you choose. If you put your brand file or your Agent Kit into ChatGPT, Claude or another AI service, that is your choice and that service's terms apply. They are not our processors.

We do not sell your personal data and we do not share it for cross-context behavioral advertising, as those terms are used in California law. We share it with no one outside this list, except where the law requires it, where we need to establish or defend a legal claim, or, if the business is ever sold or reorganized, with the party acquiring it. If that happens, this policy travels with the data.

11. International transfers

We are based in the United States and the companies above are mostly based there. If you are in the European Economic Area, the United Kingdom or Switzerland and you give us personal data, it will be transferred to and stored in the United States. Transfers are made under the EU-US Data Privacy Framework certification where the vendor holds it, and under the European Commission's Standard Contractual Clauses with the UK Addendum where it does not. The courses are open to adults anywhere, and signing up for one puts you on the course email list on the same terms wherever you are.

12. How long we keep it

• Your account, email address, enrollments, progress, consent record and certificates are kept until you ask us to delete them. There is no automatic expiry today.
• Sessions expire after thirty days. Sign-in codes expire after ten minutes. Rate-limit counters expire on their own windows, which run from ten minutes to an hour.
• Server logs are kept for 30 days.
• The course mailing list: your address stays on it until you unsubscribe or ask us to remove you, plus a short record of the unsubscribe so we keep honoring it.
• Your saved tool answers are kept until you delete them or ask us to delete your account. Deleting one entry or clearing a tool removes it right away and cannot be undone. The short-lived undo for ticking off creators and competitors keeps only an id and a time, for ten minutes.
• Your share links, the Agent Kit record, the team's notes on a link, and the record of Agent Kit emails are kept until you ask us to delete your account. They are removed with the account.

When a retention period ends, or you ask for deletion, we delete the data or anonymize it so it can no longer identify you.

13. Your choices and your rights

Wherever you live, you can:

• change or remove the name printed on your certificate, at any time;
• revoke a public certificate, which makes it private again;
• unsubscribe from course email using the link in any of them, or by emailing tony@runsimpler.com;
• change or delete what you saved in the course tools: you can edit any answer, delete a single entry, or clear a whole tool, all from the tool page. A confirmation comes first and there is no undo;
• download a copy of your saved tool answers as a file, for all tools or for one tool, from the tools page, and download your brand file with the Download my answers button;
• ask us for a copy of anything else we hold about you, ask us to correct it, or ask us to delete it, by emailing tony@runsimpler.com. There is no button yet to delete everything you saved in one go, to delete your share links, or to delete your account, so email is the way to do those, and we will confirm when it is done. Deleting your account removes your tool answers, share links, Agent Kit record and email record with it.

If someone who is on another person's tools list (a creator, competitor or recommendation contact) asks us to remove their name or link, they can email the same address. Staff cannot search what students save in the app, so an engineer looks for the name or link with a direct database query and removes it where it is found. Please include the link or name you are asking about.

We will need to be reasonably confident you are who you say you are before we hand over or delete anything, so we may ask you to confirm something only you would know. We respond within 45 days for California requests and within 30 days for any other request, and we will tell you if we need an extension the law allows. There is no charge unless a request is manifestly unfounded or excessive, and we will tell you before charging anything. An authorized agent may make a request for you; we will ask for proof that you authorized them.

If you are in the European Economic Area or the United Kingdom, you also have the rights in Articles 15 to 22 of the GDPR and UK GDPR, including the right to withdraw consent at any time (Article 7(3)), the right to object at any time to our using your details for direct marketing (Article 21(2) and (3)), and the right to complain to your data protection authority. In the United Kingdom that is the Information Commissioner's Office. If you object to marketing, we stop.

If you are a California resident, the CCPA as amended by the CPRA gives you rights to know, delete, correct, opt out of sale or sharing, and not to be discriminated against. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We honor these rights as a voluntary commitment rather than as a statutory obligation, and we extend them to every US resident. If you think we have handled something badly, write to us first. If the rules where you live give you a route to a regulator, that route is yours and nothing here takes it away.

14. Age

The courses are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us information, email us and we will delete it.

15. Security

Sign-in codes are stored hashed. Sign-in and certificate lookups are rate limited. Course files are stored as private objects and are only reachable through a request this site authorizes. The site runs a content security policy that restricts what code a page may load. Your saved tool answers can be read by you; our team's pages show counts only, and the work list shows your email and the link you pasted. No system is perfectly secure and we are not going to tell you otherwise. If a breach affects your personal data and the law requires us to tell you, we will tell you, and we will tell you what happened.

16. Changes to this policy

We will update this page when the product changes and move the effective date at the top. If a change materially affects how we handle your personal data, we will say what changed where you can see it, and a change to what you agreed to will ask for your acceptance again.

17. Contact

Email tony@runsimpler.com, for the attention of Anthony Drummond, President, with any question about this policy, to ask for a copy of your data, or to have it deleted. Postal address: Moonbound Consulting, LLC, 333 W. Wacker Drive, Suite 2600, Chicago, IL 60606. The terms of use cover how the courses themselves work.