Privacy Policy

Last updated: November 2026

What we collect

• Purchase data: for workbooks, your email and order details (what you bought, the amount, the tax, and whether you ticked the offerings box), received from Stripe when you buy. Stripe and Link handle your payment details; we never see card numbers. We also record when your download link is used, including the country it was used from, to support you and apply the refund policy. If your order includes a gift set, we record when its download links are used, including the country, linked to your order. We don’t collect the gift recipient’s name or email address to deliver the gift.
• Work product: for the Audit Kit, the responses you enter stay in your own browser, on the device you use. We keep only a completion record: your access code, email and score.
• Offering emails: if you tick the box at checkout, your email address, added to our list of people who asked for occasional emails about new workbooks and other offerings.
• Sign-ups, contact messages and feedback: what you submit through those forms.

How we use it

To deliver what you bought: access codes, downloads, receipts, and support. Sign-ups receive launch notices and material product updates — no drip sequences. If you tick the offerings box at checkout, we use your email only for occasional emails about new workbooks and other offerings from The Composure Index. Buying without ticking it never adds you to any list. We don't sell or share your data with advertisers, and your work product is never used as marketing material.

Where it lives

Framework sign-ups, contact messages, feedback, Audit Kit access codes and completion records are stored with Supabase. Workbook orders and download records are stored with Cloudflare, which also hosts the site and runs the bot check on our forms; a copy of the order records is kept in a private Google Sheet. We use Cloudflare Web Analytics to count visits; it sets no cookies and doesn’t identify you. If you arrive from one of our Google ads, we keep the ad’s click identifier with your order so Google can tell us the ad led to a sale. We don’t use Google’s advertising cookies. Google Ads receives the click identifier, order value and time for purchases that came from our ads. Payments are processed by Stripe and Link. Email is delivered by Resend, which also stores the addresses of people who ticked the offerings box. Tally runs our feedback form, and Substack handles the blog if you subscribe. Each processes data under its own privacy terms.

Your choices

Ask for a copy of your data or its deletion at any time via the contact form. Audit Kit responses live in your browser, so clearing your browser data deletes them; download your files first. To stop receiving offering emails, email hello@thecomposureindex.com, and we’ll take you off the list.