PRIVACY POLICY

Re: amandaheyman.com and related sites

Effective Date: August 17, 2026
Last Updated: August 17, 2026

This Privacy Policy describes how Amanda Heyman, d/b/a A. Heyman Strategies ("A. Heyman Strategies," "we," "us," or "our") collects, uses, discloses, and safeguards information when you:

Visit or interact with the websites we operate at amandaheyman.com and its subdomains (the "Website");
Access or use the Base Layer digital platform, currently hosted through Notion (the "Platform");
Subscribe to our newsletters or publications (the "Publications");
Register for or attend an event we host or organize (the "Events"); or
Communicate with us in connection with any of the above.

By using the Website, Platform, Publications, or Events, you agree to the practices described in this Privacy Policy.

IMPORTANT NOTICE: THE WEBSITE, PLATFORM, PUBLICATIONS, AND EVENTS PROVIDE BUSINESS CONSULTING, EDUCATION, AND STRATEGIC ADVISORY SERVICES ONLY. NOTHING PROVIDED THROUGH THEM CONSTITUTES LEGAL ADVICE OR CREATES AN ATTORNEY-CLIENT RELATIONSHIP. AMANDA HEYMAN IS LICENSED TO PRACTICE LAW IN THE STATE OF MINNESOTA. SHE IS NOT LICENSED TO PRACTICE LAW IN THE STATE OF CALIFORNIA. USE OF THE WEBSITE, PLATFORM, PUBLICATIONS, OR EVENTS DOES NOT CREATE AN ATTORNEY-CLIENT RELATIONSHIP.

1. Information We Collect

a. Information You Provide Directly

You may voluntarily provide:

Name and contact information (for example, email address)
Billing or payment information, which is submitted to and processed by third-party payment providers
Information submitted through contact forms, application forms, intake forms, assessments, event registrations, or shared documents, including any files you choose to upload
The email address used to grant Platform access. Access is provided by invitation through the Platform host; we do not create or store passwords for the Platform
Communications sent to us by email, message, or other means

b. Automatically Collected Information

When you access the Website or the Platform, certain technical information is collected automatically, including:

IP address and general location data
Browser type, device type, and operating system
Referring website and pages viewed
Dates and times of access
Links clicked and other usage data

This information is used to operate, maintain, and improve the Website and Platform.

c. Cookies and Similar Technologies

The Website and Platform may use cookies, small data files stored on your browser, to personalize your experience, remember your preferences, and collect analytics data. We may use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted).

You may disable cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain features.

d. Information from Third Parties

We may receive information about you from third-party service providers in connection with your use of the Website, Platform, Publications, or Events, such as payment processors, scheduling tools, or event registration platforms.

2. How We Use Your Information

We use the information we collect to:

Operate and maintain the Website, Platform, Publications, and Events
Provide access to Base Layer materials, resources, and consulting services
Process payments and manage subscriptions and accounts
Communicate with you regarding your account, services, updates, and administrative matters
Respond to your inquiries and provide user support
Track and measure usage and performance, including email open and click activity
Improve content, functionality, and user experience
Maintain security and prevent unauthorized or illegal activity
Comply with applicable legal and contractual obligations

We do not sell your personal information.

3. Trademark Notice

"Base Layer" is a pending federal trademark of Amanda Heyman d/b/a A. Heyman Strategies. Unauthorized use of this mark is prohibited.

4. Third-Party Service Providers

We use third-party service providers to support the Website, Platform, Publications, and Events. Where you provide information directly to a third-party service, or hold an account with one, that service's own privacy policy governs how it handles your information. Those services are named below. All other providers process information only on our instruction and are described by category. A current list of providers is available on request at hello@amandaheyman.com.

a. Services you deal with directly

Squarespace — The Website is hosted on Squarespace, which automatically collects visitor data including IP address, browser type, and pages viewed. The Base Layer application form is a Squarespace form: the information you enter, including any files you upload, is collected and stored by Squarespace in accordance with its own privacy policy.

Google reCAPTCHA — Our application form includes Google reCAPTCHA Enterprise, provided as part of Squarespace's form spam protection. When you visit a page containing a form, reCAPTCHA collects hardware, software, and behavioral signals from your browser and processes them under Google's privacy policy.

Notion — The Base Layer Platform is hosted on Notion (Notion Labs, Inc.). Access is granted by invitation to a specific email address. Notion may collect and process information related to your access to and use of the Platform in accordance with its own privacy policy. Notion does not send marketing communications on our behalf.

Kit — We use Kit (formerly ConvertKit) for our newsletter and email communications. If you subscribe, Kit collects and processes your email address, name, subscription preferences, tags, and engagement data including email opens and link clicks, in accordance with its own privacy policy. Kit subscribers are not required to be Base Layer Platform users. You may unsubscribe at any time using the link in any email.

Zoom — We use Zoom for video consultations, client meetings, and virtual Events. Zoom may collect and process information related to your participation, including your name, email address, and meeting content, in accordance with its own privacy policy.

Stripe — Payment for certain services is processed by Stripe. You submit payment details directly to Stripe, which handles them under its own privacy policy. We do not receive or store full payment card information.

Calendly — We use Calendly for scheduling. Information you submit when booking is collected by Calendly under its own privacy policy.

ScoreApp — We offer a self-assessment quiz hosted on ScoreApp. If you complete it, ScoreApp collects your responses and any contact information you provide, under its own privacy policy.

Luma — We use Luma for event registration. If you register for an Event, Luma collects your registration information under its own privacy policy.

b. Providers acting on our instruction

These providers process information only as needed to deliver our services, and not for their own purposes:

Website hosting and infrastructure
Cloud storage and file sharing
Accounting, invoicing, and financial recordkeeping
Email and internal correspondence
Website analytics
Contact and relationship management
Task management and internal operations
Data backup

c. Meeting transcription

We use Granola, an AI-enabled meeting notes tool, to generate transcripts and organize notes from consultations and internal meetings. Granola captures audio in real time for transcription purposes only and does not record or store audio after transcription is complete. Participants are notified of its use in advance through scheduling confirmations and verbally at the start of each call. Notes and transcripts generated through Granola are used for internal operational purposes only.

d. Linked third-party pages

This Website contains links to third-party landing pages and forms. When you submit information through a linked third-party page, that submission is governed by the third party's privacy policy. We encourage you to review applicable third-party privacy policies before submitting personal information.

This list may be updated from time to time. We are not responsible for the privacy practices of any third-party platform or service provider.

5. Artificial Intelligence Tools

We use artificial intelligence tools to support content development, document drafting, research, transcription, and internal operational tasks. These tools may include Claude (Anthropic), Gemini (Google), and similar large language model platforms.

We do not knowingly input sensitive personal information, such as financial data, health information, or government-issued identification numbers, into AI tools.
We do not knowingly input confidential client information into AI systems that train on user data.
Where client context is used to inform AI-assisted work product, we use the minimum information necessary and exercise judgment about what is appropriate to include.
Output generated by AI tools is reviewed and edited by a human before use in any client-facing or operational context.
Users agree not to input Base Layer proprietary materials, course content, or template documents into AI tools that train on user inputs.

Each AI tool provider processes inputs in accordance with its own privacy policy, and we encourage you to review those policies for information about how your data may be used to train or improve AI models.

6. Platform Content and Educational Materials

The Base Layer Platform contains educational and informational content, including videos, written materials, and business document templates. This content is provided for educational and strategic advisory purposes only and does not constitute legal advice.

All Platform content is proprietary to A. Heyman Strategies. Unauthorized reproduction, distribution, or commercial use of Platform materials is prohibited.

7. How We Share Your Information

We may share your information only in the following circumstances:

With service providers who assist in operating the Website, Platform, Publications, or Events, and only to the extent necessary to perform their services
To comply with applicable laws, regulations, court orders, or lawful government requests
To enforce our agreements or protect our rights, property, or safety, or that of our users
In connection with a business transfer, merger, acquisition, or reorganization, in which case your information may be transferred as a business asset
With your explicit consent

We do not share personal information for marketing purposes unrelated to our services. We do not sell personal information.

8. Anonymous and Aggregated Data

We may use and share anonymous or aggregated data that does not identify you individually for analytics, research, marketing, or other business purposes.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

Provide the Website, Platform, Publications, and Events
Comply with applicable legal obligations
Provide client service
Communicate with prospective, current, and potential clients
Resolve disputes
Enforce our agreements

Access to Platform materials may be terminated before or after any applicable data retention period.

10. Data Security

We implement reasonable administrative, technical, and organizational measures to protect your personal information. However, no system or method of data transmission can be guaranteed to be 100% secure. Your use of the Website, Platform, Publications, and Events is at your own risk.

11. Your Privacy Rights and Choices

You have the following rights with respect to your personal information:

Opt-Out: You may opt out of marketing or non-essential communications by following the unsubscribe link in any email or by contacting us at hello@amandaheyman.com.

Access: You may request access to the personal information we hold about you by contacting us at hello@amandaheyman.com.

Correction: You may request that we update or correct inaccurate personal information by contacting us at hello@amandaheyman.com.

Deletion: In certain circumstances, you may request that we delete your personal information by contacting us at hello@amandaheyman.com. Please note that we may need to retain certain information for recordkeeping purposes, to complete transactions, or as required by law.

This Website is operated in compliance with the California Online Privacy Protection Act (CalOPPA). Our Website does not currently respond to "Do Not Track" signals from browsers. If this practice changes in the future, this Privacy Policy will be updated accordingly.

12. Sensitive Personal Information

Please do not submit sensitive personal information through the Website, Platform, Publications, or Events. Sensitive personal information includes, but is not limited to, Social Security numbers, government-issued identification numbers, financial account numbers, health or medical information, or criminal background.

If you choose to submit such information, it will be subject to this Privacy Policy and handled with additional care; however, we strongly discourage its submission.

13. Children's Privacy

The Website, Platform, Publications, and Events are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@amandaheyman.com and we will take prompt steps to remove such information.

14. User Responsibilities

By using the Website, Platform, Publications, or Events, you agree to:

Maintain the confidentiality of any access credentials
Use the Website and Platform in compliance with applicable laws and our Terms of Use and Sale
Refrain from submitting sensitive personal information unless expressly requested
Refrain from using Base Layer proprietary content, templates, or materials in unauthorized ways

15. Links to Third-Party Websites

The Website or Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of the Website, Platform, Publications, or Events following the posting of changes constitutes your acceptance of the revised Privacy Policy.

17. Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to its conflict-of-law principles.

18. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Amanda Heyman
d/b/a A. Heyman Strategies
Email: hello@amandaheyman.com
Website: www.amandaheyman.com