Datacean

Privacy Policy

Last updated: 7 August 2026

1. Who is responsible for your data

The controller of the personal data described here is Iron Intelligent Technologies LLC, a limited liability company formed under the laws of the State of Wyoming, United States, trading as Datacean. Our mailing address is 6 Liberty Square #2513, Boston, Massachusetts 02109, United States. You can reach us at support@datacean.com for anything in this policy.

2. What we collect and why

Waiting list

When you join the waiting list we store the name and email address you type into the form, the source that referred you and the tags that describe which list you joined. We use them to email you about the programme. The legal basis is your consent, which you can withdraw at any time through the unsubscribe link in every email.

The readiness quiz

The quiz asks you a short set of multiple-choice questions and then asks for your name and email address before it shows your results. They are the price of the results, and there are no results without them. If you tell us you lead a company or a team, it also asks for your company name and a phone number; the phone number is optional and leaving it blank changes nothing about what you are shown. We never ask for a phone number on the individual path.

We keep the answers themselves with your response. On the company path we keep the score they add up to and the follow-up priority that score sets; on the individual path we keep the segment they place you in. We also store the UTM parameters carried by the link you arrived on — the campaign, source, medium and content values in the address bar — so that a signup can be attributed to the post, video or email that earned it.

We use all of it to send you the readiness report, to decide who we follow up with first, and to enrol you in the email sequence that matches your answers. Your score does not change what you are shown: everyone on the same path gets the same results page and the same next step. The legal basis is your consent, which you can withdraw through the unsubscribe link in every email, together with our legitimate interest in prioritising who we answer first. Taking the quiz creates or updates your subscriber record, which is how we avoid asking you for the same email twice; if you go on to register, deleting your account deletes that record and your quiz response with it.

Your account

Registering stores your name, email address and a bcrypt hash of your password— never the password itself. Password reset tokens are stored as SHA-256 hashes and expire after an hour. Signing in sets a signed session cookie in your browser; we keep no server-side copy of it. The legal basis is performance of our contract with you.

Purchases

Payment happens on a Stripe-hosted page. Card numbers never reach our servers. Stripe collects your billing address and returns to us a customer reference, a payment reference, the last four digits of the card, the amount and the products bought. We store those, plus the email address you used at checkout. The legal basis is performance of the contract, and a legal obligation for the accounting records we have to keep.

Email engagement

We keep a record of what happens to the emails we send you. When we send you an email from one of our sequences we store that we sent it and whether our email provider accepted it. Amazon SES reports back on the messages it sends, and of those reports we record three: that a message was delivered, that it bounced, or that you marked it as spam. Each record carries the technical detail of the report — the bounce type and the diagnostic code the receiving mail server returned, the feedback type of a spam complaint, the response of a successful delivery. We store one more record when you use an unsubscribe link. We do not track whether you open an email or whether you click a link inside one.

We use these records to know whether the emails you are owed actually arrived, and to stop mailing an address that fails: a bounce, a spam complaint or an unsubscribe takes you out of every sequence you are enrolled in and stops anything further being sent to you. The legal basis is our legitimate interest in a working, non-abusive mailing list, and consent where the email is marketing.

Course progress

While you watch a lesson we store how many seconds you watched, whether the lesson is complete and when you last watched it, so the platform can resume where you left off and show your progress. The legal basis is performance of the contract.

Analytics

We use Google Analytics 4 to count page views, button clicks and how far through the quiz people get. It is off until you press Accept on the cookie banner: analytics storage is denied by default and only granted after you consent. Your choice is stored in your browser under cookie-consent, not on our servers, and you can change it by clearing your browser storage for this site. The legal basis is consent.

Technical data

Our servers process your IP address in memory to rate-limit joining the waiting list, registering, signing in and password resets. It is not written to our database. Application and platform logs may contain request metadata. The legal basis is our legitimate interest in keeping the service available and resistant to abuse.

3. Cookies and similar storage

A sign-in session cookie is strictly necessary and set only once you log in. Google Analytics cookies are set only after you accept the banner. Your consent choice is kept in the browser's local storage. We set no advertising cookies.

4. Video

Course and sales videos are hosted on YouTube. Sales pages embed them through youtube-nocookie.com, and the course player loads YouTube's player from youtube.com, which can set cookies once you press play. Google's own privacy terms govern what it does with that.

5. Who else processes your data

  • Stripe — payment processing, billing address collection, fraud checks and receipts. Stripe acts as its own controller for fraud prevention and regulatory compliance.
  • Amazon Web Services — Amazon SES sends our transactional and sequence emails and reports delivery events.
  • Microsoft Azure — hosts the application and the PostgreSQL database that holds your account, purchases and progress.
  • Google — Google Analytics 4 (only with your consent) and YouTube video playback.

We do not sell your personal data and we do not share it for advertising.

6. Where your data is stored

Our application, database and email sending run in the United States. If you are in the EEA or the UK, that is a transfer outside your region; it relies on the data processing terms of the providers above, which incorporate the European Commission's standard contractual clauses.

7. How long we keep it

  • Waiting list and marketing records — until you unsubscribe. We keep the record marked as unsubscribed so we can honour your opt-out.
  • Account, course progress and subscriber record — until you delete your account, which removes them immediately.
  • Quiz responses — deleted with your account, along with the subscriber record they are held against. If you take the quiz and never register, we keep the response for two years, and you can ask us to delete it sooner at support@datacean.com.
  • Email engagement events — the same deletion removes the link to your account and to your subscriber record. What is left is the delivery record itself: what happened to a message, when, and the technical response our email provider returned.
  • Purchase records — kept after you delete your account, with the link to your user account removed. Tax and accounting law requires us to keep records of transactions, and the right to erasure does not override that. The retention period is [FOUNDER: statutory retention period for accounting records in the jurisdiction of the legal entity].
  • The checkout record that documents an order — the email address used at checkout, the Stripe customer reference, the last four digits of the card and the amounts charged are kept with the purchase for the same accounting reason. The token that grants access to that record through the site stops working 24 hours after checkout.

8. Your rights

If the GDPR or the UK GDPR applies to you, you have the right to access your data, correct it, erase it, restrict or object to its processing, receive it in a portable format and withdraw consent at any time without affecting processing already carried out.

  • Erasure — you can delete your account yourself from the Profile page in your dashboard. It deletes your account, course progress, subscriber record and quiz response right away, and detaches your email engagement events. Purchase records survive, as explained above.
  • Marketing — every sequence email carries a one-click unsubscribe link.
  • Everything else — email support@datacean.com and we will answer within one month.

You can also complain to the data protection authority where you live or work if you think we have handled your data badly.

9. Automated decisions and children

We do not make automated decisions that produce legal effects for you and we do not profile you beyond the analytics, email engagement and quiz scoring described above. The quiz score sets the order in which we follow up and nothing else: it does not change the results you are shown, the next step you are offered or the price you pay. The platform is not intended for anyone under 16 and we do not knowingly collect their data.

10. Changes

If we change how we handle your data we will update this page and the date at the top. See also our Terms of Service.