What we collect, and why.

Hunter Green LLC ("Hunter Green") is a product studio based in Colorado, in the United States, led by David Meehan. Hunter Green LLC is responsible for the personal data this policy covers (the data controller, in GDPR terms). The policy covers hunter.green, the inquiry endpoint at /api/inquiry, and the workshop unlock at /api/workshop-download. For any question about it, or to exercise any of the rights below, email david@hunter.green.

We only collect what you send us. There is no account to create and no login.

• When you submit the contact form, or an agent posts to /api/inquiry, we get your name and email, and optionally your company, role, what you are building, what you want to improve, your stage, timeline, budget, and preferred way to work. An agent acting for you can also send its own name, operator, contact, and reply address.
• If an AI agent submits an inquiry on your behalf, we receive your details from the agent rather than from you directly. We treat them exactly as if you had sent them yourself, and every right in this policy applies to them.
• When you unlock a workshop, we get your email address and, if you choose to share them, your product and your role.
• The answers you type into a workshop builder save to your own browser's local storage and never reach us. We cannot see them, back them up, or recover them. Clearing your browser storage deletes them.
• When you book a call, the scheduling step embeds Google Calendar. The time you pick and the details you enter there are handled by Google under Google's privacy policy, not by us.
• When you subscribe to the newsletter, the link takes you to Substack, which handles your subscription and email under Substack's privacy policy.
• Our host, Vercel, keeps standard server logs, basic request data such as IP address and browser type, the normal byproduct of serving a website. We also hold your IP address briefly in memory to rate limit the inquiry endpoint; those counts are never written to a database.
• Photography on the site loads from Unsplash's image CDN, and images inside articles syndicated from the newsletter load from Substack's CDN. Each receives the standard request data any image host sees, such as your IP address and browser type.

• To read your inquiry and reply, usually within two business days.
• To keep a record of the conversation so we can follow up and work together if it is a fit.
• To send you the workshop guide you asked for, and to tell you when a new workshop ships or one you unlocked gets a real update. Reply to any of those emails and ask us to stop, and we will.
• To keep the site secure and working, and to prevent abuse of the inquiry endpoint.

Where the GDPR applies, we rely on our legitimate interest in answering the inquiries people send us and running the studio, on taking the steps you request before a contract, and on your consent for workshop updates, which you can withdraw at any time.

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models. We also do not use it to make automated decisions that have a legal or similarly significant effect on you.

We use a small number of processors to run the studio. Your data reaches them only to do the jobs above.

• Attio (our CRM), where inquiries and workshop emails are stored so we can respond and follow up.
• Vercel, which hosts the site, processes requests, and keeps the server logs.
• Google Calendar, only if you use the booking step, for the details you enter there.
• Substack, only if you subscribe to the newsletter.

These providers process data in the United States. If you contact us from somewhere else, your data travels there, protected by the contractual safeguards each provider publishes.

We may also disclose information if the law requires it, or where it is needed to protect our rights or someone's safety. If Hunter Green is ever acquired or merged, the data moves with the business under this same policy, and we will note the change here. We do not share your data with anyone else.

The site sets no advertising or analytics cookies of its own, and there is no tracking pixel. The one third-party embed is the Google Calendar booking calendar on the contact page. It loads only when you choose to show available times after submitting an inquiry, and Google may set its own cookies once it loads, under Google's policy.

The workshops save your answers in your browser's local storage, on your device. That data never leaves your browser. Because we do not track you across sites, a Do Not Track or Global Privacy Control signal has nothing here to switch off. You get that treatment by default.

The site runs over HTTPS, your data lives in the systems of the processors named above, and access to it is limited to David. API keys stay on the server and never reach the browser. No system is immune to a breach, so we keep what we hold small, and if a breach ever affects your data we will tell you promptly what happened and what we are doing about it.

We keep inquiry and contact details while we are in conversation and while there is a live business relationship, then delete them once they are no longer needed. Vercel retains its server logs on its own short schedule. Ask us to delete your data at any time and we will. If the law requires us to keep a particular record, we will say so and delete the rest.

You can ask us for a copy of what we hold, in a portable format, and ask us to correct it, delete it, or stop using it for a particular purpose. Where we rely on your consent, you can withdraw it. Email david@hunter.green from the address you used with us and we will answer within a month. If a request is complex enough to need longer, we will say so and tell you when to expect the answer. If we refuse a request and you disagree, tell us and we will take a second look. We will never treat you differently for exercising a right.

Depending on where you live, these rights come from the GDPR or from state laws like the Colorado Privacy Act and the CCPA. We extend them to you here regardless. We do not sell personal data and we do not use it for targeted or cross-context behavioral advertising, as those laws define the terms. If you are in the EEA or the UK, you can also complain to your data protection authority, though we would rather you bring the problem to us first.

The site is for people building products, not for children, and is not directed at anyone under 16. We do not knowingly collect data from children, and if we learn we have, we will delete it.

If we change how we handle data, we will update this page and the date at the top. A change that reduces your rights gets called out plainly at the top, not slipped in. For anything not covered here, see the terms of use.