What I do with your information.

Who this covers

v0 University is a one-person business run by Jon Yeazel. I build websites with people on a live one-hour call. This policy explains what happens to your information when you visit this site, answer the questions on it, submit a form in one of my Facebook or Instagram ads, or book a session.

If anything here is unclear, email jonyeazel@gmail.com and ask me directly. A real person reads it.

What I collect

Only what the site genuinely uses. Concretely:

• Information you give me. Your name and email address when you finish the questions or request the guide. Your answers to the three qualifying questions — what you are building, whether it is for you or a business, and whether you already have a website. If you book a session, the time you picked.

• Your phone number. Only if you choose to text me. Your message comes from your own phone, so I receive your number the same way anyone does when you send a text. I use it to reply to you and nothing else.

• Lead forms in my ads. If you submit a lead form inside Facebook or Instagram, Meta passes me the fields you filled in — typically your name and email. You are giving that to Meta first; their privacy policy governs that step.

• Payment information. Card payments are processed entirely by Stripe. I never see or store your full card number. I only receive confirmation that a payment succeeded, plus the billing email and amount.

• Automatically collected. Your IP address, browser and device type, the pages you view on this site, and the page that referred you. This is ordinary web-server and analytics data.

Cookies and tracking

This site runs the Meta pixel so I can tell which ads bring people who actually book. It sets Meta's own cookies — `_fbp` and `_fbc` — which let Meta recognise a returning browser.

If you arrived from one of my ads, the link carried a click identifier. This site stores that identifier in the `_fbc` cookie itself, rather than relying on Meta's script to do it, so I can still tell which ad you came from even if your browser blocks that script. It identifies the ad, not you.

This site also keeps a random visitor ID — a `v0u_eid` cookie and a matching entry in your browser's local storage. It is a string of random characters generated on your device. It contains no name, email or phone number, and it lets me see that one person viewed a page and later answered the questions, instead of counting that as two unrelated strangers. It is sent to Meta alongside the events below for the same reason.

I also send Meta a server-side copy of the same events (a page view, a completed set of questions, a booking). When that copy includes your email or phone number, it is hashed with SHA-256 before it ever leaves this server, so Meta receives an irreversible fingerprint rather than your actual address.

One more thing, and it is not tracking: when you unlock the free guide, the site saves a small flag in your own browser's local storage so it remembers you already have access. It stays on your device and never reaches me.

You can block or delete cookies in your browser settings, and you can limit ad tracking in your Facebook and Instagram ad preferences. The site still works.

Why I use it

• To reply. Your answers tell me what you need before we get on a call, so the hour is not spent on discovery.

• To deliver. Sending the guide you asked for, and the details for a session you booked.

• To get paid. Processing your payment and keeping a record of the transaction.

• To measure ads. Knowing which ad brought you here so I stop paying for the ones that do not work.

• To keep it working. Spotting abuse, spam, and errors.

Who else sees it

I do not sell your personal information, and I do not share it with data brokers. I use a small number of service providers to run the business, and each one only gets what it needs to do its job:

• Vercel. Hosts this website and its server logs.

• Resend. Sends the email that delivers your guide.

• Stripe. Processes payments.

• Meta. Receives advertising events, including hashed email or phone where available, so I can measure ad performance.

A straight note about advertising

Under California law, sending hashed contact data to Meta for advertising measurement can count as “sharing” for cross-context behavioural advertising, even though no money changes hands and I gain no data in return. I would rather say so plainly than hide behind the fact that I am not selling anything.

If you would rather I did not do that with your information, email jonyeazel@gmail.com with “opt out of ad sharing” and I will exclude you. You will still get the same reply and the same session.

Your rights

Depending on where you live in the US, you have some or all of the following rights. I honour all of them for everyone who asks, regardless of state, because sorting people by postcode is not a principle:

• Know. Ask what information I hold about you and get a copy.

• Delete. Ask me to erase it.

• Correct. Ask me to fix something that is wrong.

• Opt out. Tell me to stop sharing your data for advertising.

• No retaliation. Exercising any of these changes nothing about the price you pay or the service you get.

How to make a request

Email jonyeazel@gmail.com and tell me what you want done. Please send it from the address you originally gave me — that is how I confirm it is really you, and it means I do not have to ask you for identity documents.

I reply within 30 days, and usually much sooner. There is no form and no charge.

How long I keep it

Enquiries and answers: up to two years after we last spoke, then deleted. Long enough that I remember the context if you come back, not so long that I am sitting on a pile of old data for no reason.

Records tied to a payment: kept up to seven years, because tax and accounting rules require it.

If you ask me to delete your information sooner, I will — apart from anything I am legally obliged to retain for those payment records.

How it is protected

The site is served over HTTPS. Payments never touch my systems. My service providers are established companies with their own security programmes.

That said, no method of transmitting data over the internet is completely secure, and anyone who tells you otherwise is selling something. I keep what I collect to a minimum precisely because the safest data is the data I never asked for.

Children

This is a service for people running a business, and it is not directed at children. I do not knowingly collect information from anyone under 16. If you believe a child has sent me something, email me and I will delete it.

Changes to this policy

If I change how I handle your information, I will update this page and change the date at the top. If the change is significant and I have your email, I will tell you rather than quietly editing the page and hoping you notice.

Contact

Questions about this policy, or want your information deleted? Email me and I will handle it myself.