What I collect, and what I do with it.

This policy covers jordanmurphy.co only. The other two properties, brainapes.com and thegrowthtransfer.com, have their own.

1. Who I am, and how to reach me

I am Jordan Murphy. This is my personal site, and the company legally responsible for what it collects is Brain Apes, LLC. For a privacy question, or to have your information deleted, email jordan@brainapes.com.

2. What I collect, and where it comes from

What you hand me

The contact, speaking and partnership forms collect your name and email address, what you tell me about your inquiry, your organization and your timing, and which page and form it came from. Subscribing to the letter collects your email address; an optional step after it invites your name, your role, your company website and the topics you want to read about.

What the site records on its own

When you press a button or follow a link here, I record it: the page you were on, what was pressed and where it pointed, the campaign tags in the link that brought you, the country the request came from, your browser's user agent string, the time, and a one way salted hash of your IP address. Your IP address itself is not stored, and nothing you type into a form is included. The booking calendar on the Work With Me page reports the stages of a booking in the same form, and nothing you type into it reaches me. Neither sets a cookie, and neither names you.

Page analytics

Every page loads a website analytics service's script, which counts the page view. It sets no cookie and stores nothing on your device, and the request it sends carries the page address, your browser's user agent and your IP address.

Session recordings

Every page carries a loader for Microsoft Clarity, which records a visit as a replay: pages seen, scroll depth, mouse movement, clicks, and script errors. It ships without a project id, so today it loads nothing, and it may run in future. Clarity masks what you type in form fields before anything leaves your browser, it sets its own cookies, and the loader will not run it for a browser that sends Do Not Track.

3. Why I use it, and the lawful basis

• To answer you, hold the conversation you asked for, and assess a speaking or partnership inquiry: performance of a contract, or steps taken before one at your request.
• To send the letter and point it at what you told me you are working on: your consent, which you can withdraw at any time, through the unsubscribe link in every letter or by replying to one.
• To see which link or page brings people here, keep the site working, and spot abuse of the forms: my legitimate interest in understanding and securing this site.
• To keep ordinary business records: legal obligation, and legitimate interest where no law compels it.

4. Who receives it

None of it is ever sold or shared for advertising.

• Calendly runs the booking calendar on the Work With Me page. It collects your name, email address, scheduling preferences, time zone, IP address, and browser and device details, and sets its own cookies inside the frame. See the Calendly Privacy Notice.
• Microsoft Clarity would receive the session data described above if I switch it on. See the Microsoft Privacy Statement.
• A website host, which serves these pages, holds every form submission, and logs ordinary request information including IP addresses.
• A database host, which holds the click and booking stage records described above.
• A website analytics service, which counts page views and receives the page address, user agent and IP address described above.
• Advisers, and anyone the law requires me to disclose to.

These providers are in the United States, so information collected here is processed there, and where the law requires safeguards for an international transfer they are used.

5. How long I keep it

• Click and booking stage records: deleted once they are older than 730 days.
• Newsletter subscribers: until you unsubscribe.
• Contact, speaking, and partnership submissions: as long as the conversation or the business record needs them, and no longer than seven years.
• Bookings: held by Calendly under its own policy, and kept by me as long as the client relationship requires.

6. Your rights

Wherever you live, you can ask for a copy of what I hold about you, have it corrected or deleted, get it in a portable form, object to how I use it, or withdraw a consent you gave. Email jordan@brainapes.com and say what you want.

If you are in California. Under the CCPA and CPRA you can know what personal information I collect, and have it deleted, corrected, or kept out of any sale or sharing. I do not sell it or share it for cross context behavioral advertising, and I will not treat you differently for exercising a right.

If you are in the European Economic Area, the United Kingdom, or Switzerland. Under the GDPR and equivalent local law you have the rights above, including restriction of processing, and the right to complain to your local supervisory authority.

7. Cookies and local storage

My own code sets no cookies, and there are no advertising cookies here. Calendly sets its own inside the booking frame, and only if you use the calendar. Clarity would set its own if I switch it on, and it never loads for a browser that sends Do Not Track. The page analytics script sets none, on any page. Subscribing writes one entry in your browser's local storage so the prompt is not shown again, and that entry never leaves your browser.

You can block or delete cookies in your browser settings. Doing that may break the Calendly booking flow.

8. Changes to this policy

I update this page when what I collect changes. The Effective date at the top records when it last changed, and a material change is said out loud, here and in the letter.