Effective date: October 2026
This policy explains how Open Arm Solutions ("Open Arm Solutions," "we," "us") collects, uses, shares, and protects personal information when you visit openarmsolutions.com, book a call, take our AI-readiness scorecard, register for a workshop, buy an assessment, or email us.
This policy does not govern the business data we handle for clients during a paid engagement (for example, documents loaded into an AI system we build for you). That data is covered by your signed agreement with us, our Data Processing Agreement, and our Security & Data Handling commitments.
The short version
- We collect only what we need to answer you, schedule you, run workshops, and get paid.
- We do not sell or rent personal information, and we do not share it for targeted advertising.
- We do not use your information, or any client's data, to train AI models.
- Card payments are handled by Stripe. Our website never sees or stores your full card number.
- We send marketing email only if you opt in, and every marketing email has an unsubscribe link.
- You can ask to see, correct, or delete your information at any time by emailing openarmsolutions@gmail.com.
1. Information we collect
Information you give us
| What | Examples | When |
|---|---|---|
| Contact details | Name, email address, company name, phone number (optional) | Contact and booking forms, workshop registration, scorecard, checkout |
| Booking details | The time you pick, your time zone, and anything you tell us about what you want to discuss | Booking a call or assessment |
| Workshop reservations | Which workshop, number of seats, names and emails of attendees you register | Workshop registration |
| Accommodation requests | Only what you choose to tell us so we can make a workshop accessible to you (for example, "I need captions" or "I use a wheelchair") | Workshop registration or email |
| Scorecard answers | Your answers about how your business uses AI and handles data, and the score and recommendations we generate from them | AI-readiness scorecard |
| Purchase details | What you bought, amount, date, and limited card details Stripe shares with us (such as card brand and last four digits) | Checkout |
| Messages | Emails and form messages you send us | Any time you contact us |
If you register other people for a workshop, please make sure they are comfortable with you sharing their name and email with us.
Please do not send us sensitive information through our website, such as Social Security numbers, passwords, health information, or full payment card numbers. We do not need it to respond to you.
Information collected automatically
When you visit the site, our hosting and security providers automatically process technical information such as your IP address, browser type, device type, the pages requested, and the date and time of each request. This is needed to deliver pages, keep the site running, and block attacks and spam. We do not use it to build a profile of you.
We do not use analytics tools, advertising cookies, or tracking pixels. See section 6.
Information from other sources
Stripe tells us whether a payment succeeded, was refunded, or was disputed. If someone registers you for a workshop, we receive your name and email from them.
2. How we use your information
We use personal information to:
- Respond to your questions and requests.
- Schedule, confirm, and hold calls, assessments, and workshops, and send reminders, joining links, materials, and (if offered) recordings.
- Process payments, refunds, and workshop credits, and keep the business and tax records the law requires.
- Send you your scorecard results and, if you ask, follow-up recommendations.
- Provide accommodations you request.
- Send marketing email if you have opted in (see section 8).
- Understand, in aggregate, how businesses answer our scorecard so we can improve our workshops and services. Any statistics we publish (for example, "6 in 10 respondents have no AI policy") are aggregated and never identify you or your company.
- Protect the site, our business, and our customers from fraud, spam, and abuse.
- Comply with law and enforce our Terms of Use.
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Your scorecard result is informational only.
3. AI and your information
- We do not use personal information from this website, or any client data, to train or fine-tune AI models, whether our own or anyone else's.
- When we use third-party AI services to run our own business (for example, to help draft a reply), we use only services and settings under which the provider does not use our inputs to train its models, and we do not paste scorecard answers, payment information, or client data into consumer AI tools.
4. Who we share it with
We share personal information only with service providers that help us run the business, and only what each one needs. They are contractually or by their published terms limited to using it to provide their service to us.
| Provider | What they do for us | Information involved | Their policy |
|---|---|---|---|
| Stripe | Payment processing, refunds, fraud prevention | Name, email, billing details, card details (collected directly by Stripe), purchase details | stripe.com/privacy |
| Supabase | Database that stores form submissions, bookings, workshop reservations, and scorecard answers | The information you submit on our site | supabase.com/privacy |
| Lovable and Cloudflare | Website hosting, content delivery, and security | Technical information about your visit; information you submit passes through them on the way to our database | lovable.dev/privacy, cloudflare.com/privacypolicy |
| Resend | Sending transactional email (confirmations, receipts, reminders, scorecard results) and, if you opt in, marketing email | Name, email address, email content | resend.com/legal/privacy-policy |
| Our business email and calendar | Emails you send us, calendar invitations | policies.google.com/privacy | |
| Zoom | Hosting virtual calls and workshops (or Google Meet, covered above) | Name, email, and what you share during the session | zoom.com/privacy |
Stripe may also use payment information as an independent business, for example to prevent fraud and meet its own legal obligations, under its own privacy policy.
We may also share information:
- With our professional advisers (such as our attorney or accountant), who are bound by confidentiality.
- When required by law, subpoena, or court order, or to protect the rights, safety, or property of our customers, the public, or us.
- If our business is sold, merged, or reorganized, with the new owner, who must honor this policy for the information it receives. We will tell you before that happens.
- With your permission, for example if you agree to let us publish a testimonial with your name.
We do not sell personal information. We do not rent it, trade it for anything of value, or share it for cross-context behavioral (targeted) advertising. We do not sell sensitive data of any kind.
Our providers may store and process information in the United States and other countries where they operate.
5. The AI news headlines on our site
Our site shows a list of AI-news headlines that link to articles on publishers' own websites. Our server retrieves those headlines from the publishers' public news feeds, so simply viewing the list does not send your information to any publisher. When you click a headline, you leave our site, and the publisher's own privacy policy and cookies apply. We do not control those sites and do not receive information from them about your visit.
6. Cookies, analytics, and similar technologies
- No analytics or advertising tracking. At this time we do not use Google Analytics or any other analytics service, advertising cookies, social-media pixels, or session-recording tools.
- Strictly necessary technologies. Our hosting and security providers may set cookies needed to protect the site from bots and abuse. Our site may use your browser's storage to make a feature work (for example, keeping your place in a multi-step form). Stripe's checkout pages set their own cookies to process payments and prevent fraud.
- Browser privacy signals. Because we do not sell or share personal information for advertising, signals such as Global Privacy Control do not change anything we do today. If that changes, we will honor them.
- If we add analytics later, we will update this section before turning it on: we will name the provider, say what it collects and how long it keeps it, explain how to opt out, and change the effective date at the top of this policy.
7. How long we keep it
| Information | How long |
|---|---|
| Inquiries and booking requests that do not become a paid engagement | 24 months after our last contact with you |
| Workshop registrations and attendance records | 3 years after the workshop |
| Purchase, refund, and invoice records | 7 years, for tax and accounting purposes |
| Scorecard answers | 24 months, then deleted or stripped of anything that identifies you |
| Accommodation requests | Deleted within 30 days after the event |
| Workshop recordings (if any) | As described in our Workshop Terms |
| Marketing email list | Until you unsubscribe. After that we keep only your email address on a "do not email" list so we can honor your choice |
| Technical logs | Kept by our hosting and security providers for limited periods under their own policies |
We may keep information longer if the law requires it, or if it is needed to resolve a dispute or enforce an agreement.
8. Email from us
- Transactional email. We email you about things you asked for or bought: confirmations, receipts, reminders, joining links, materials, scorecard results, and changes to an event. You will receive these even if you have not opted in to marketing.
- Marketing email. We send newsletters, workshop announcements, and offers only if you opt in, for example by checking an unchecked box on a form. Every marketing email identifies us as the sender, includes our postal address, and has a working unsubscribe link. We honor unsubscribe requests promptly, and always within 10 business days as the federal CAN-SPAM Act requires.
- Phone and text. If you give us your phone number, we use it only to reach you about your booking, workshop, or engagement. We do not make marketing calls or send marketing texts, and we never call you with an automated, prerecorded, or AI-generated voice without your prior express consent.
9. How we protect it
- All connections to our website use encryption in transit (HTTPS).
- Our database provider encrypts stored data at rest.
- Access to stored personal information is limited to the people who need it to run the business, and every account we use to run the business is protected with multi-factor authentication.
- We use a password manager and do not share login credentials.
- We review which service providers hold personal information and remove data we no longer need.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by law. For Florida residents, Florida's Information Protection Act (section 501.171, Florida Statutes) generally requires notice within 30 days after a breach is determined.
10. Your choices and rights
You can ask us to:
- Access the personal information we hold about you, and get a copy in a portable format.
- Correct information that is wrong.
- Delete your information.
- Stop marketing email (or simply use the unsubscribe link).
- Withdraw consent you gave us, for example to use a testimonial.
To make a request, email openarmsolutions@gmail.com with the subject line "Privacy request." We will confirm your identity, usually by confirming you control the email address on file, and respond within 30 days. If you are asking on someone else's behalf, we will need proof that they authorized you.
We may keep some information when we have to, for example payment records we must keep for tax purposes, or information needed to complete a transaction you requested, prevent fraud, or handle a legal claim. If we cannot fully honor a request, we will tell you why. If you disagree, reply and ask us to reconsider; we will respond within 30 days.
We will not treat you differently for exercising any of these choices.
11. Florida residents and state privacy laws
- Florida Digital Bill of Rights. The consumer-rights part of this law (sections 501.701–501.722, Florida Statutes) applies only to businesses with more than $1 billion in global annual revenue that also meet other criteria, such as earning at least half their revenue from online advertising. Open Arm Solutions does not meet those criteria, so those provisions do not apply to us. The law's separate rule on selling sensitive personal data (section 501.715) applies to businesses of any size; because we do not sell sensitive data, or any personal data, the notice that rule requires does not apply to us.
- Florida Information Protection Act. We take reasonable measures to protect personal information and will give the breach notices this law requires (section 501.171, Florida Statutes).
- Other states. Many U.S. state privacy laws apply only to businesses above size or data-volume thresholds that we do not meet. Even so, we honor the access, correction, and deletion requests described above for everyone, wherever they live.
12. Children
Our website and services are for businesses and working professionals. They are not directed to children under 13, and they are not intended for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we will delete it.
13. Links to other websites
Our site links to other websites, including news publishers, Stripe, and tools we mention in workshops. Their privacy practices are their own. Please review their policies.
14. Changes to this policy
We will post any update on this page and change the effective date at the top. If a change materially affects how we use information you have already given us, we will tell you by email (if we have your address) or with a notice on the site before the change takes effect.
15. Contact us
Open Arm Solutions Coral Springs, Florida Email: openarmsolutions@gmail.com Website: https://openarmsolutions.com