For the free weekly brief: name, email address, optionally firm and role (you fill these in on the signup form). Used to deliver the brief and to keep the subscriber list at a manageable size.
For one-time report purchases: PayPal sends us your name, email, transaction ID, and payment status. We use the email to deliver the PDF and to send a single receipt. We do not store credit-card numbers — PayPal handles those.
For subscription tiers: the same as above, plus the PayPal Subscription ID and renewal date. We use the email to send the welcome magic link and to bind your API key (Diligence/Enterprise) and JWT session.
For portal usage: we log API calls and dashboard queries against your account for rate-limiting and abuse prevention. We do not log the content of your queries against any analytics platform; the logs stay on the Cloudflare Worker and Hugging Face Space and are aged out after 30 days.
Subscriber list (email + name + tier): stored in Cloudflare KV. Encrypted at rest. Only Michael Msebenzi has access.
PayPal billing data: stored by PayPal, not by ADW. Subject to PayPal's privacy policy.
Magic-link tokens: stored in Cloudflare KV, auto-deleted after 1 hour (sign-in links) or 24 hours (welcome links).
API keys: stored in Cloudflare KV, retained for the life of the subscription. Rotated by user request or on tier change.
Order tracker and subscriber tracker: CSV files held by Michael Msebenzi for revenue reconciliation. Not shared.
The weekly brief on Thursdays, sent individually to each subscriber via Resend from [email protected] (one message per recipient — recipients never see each other's addresses).
Personalized brief links (engagement tracking). The links in your copy of the brief are unique to you. When you open the hosted brief PDF, the link passes through a first-party tracker on texasentitlement.com that records the click — your email, which edition, a timestamp, and your browser's user-agent — then immediately forwards you to the PDF. This is how we measure which issues are read. It is first-party and server-side: no third-party analytics, no tracking pixel, and we do not log your IP address for this. The data is never sold or shared; it is used only for our own engagement analytics and aged out with the rest of our server-side logs. Prefer no tracking? Reply to any issue and we'll send you the plain PDF link instead.
Transactional email: welcome links, receipts, magic links, occasional product-release notifications. Sent via Resend (a third-party email delivery service); Resend is bound by their privacy policy.
No marketing partners. Your email is never sold, rented, or shared for marketing purposes.
ADW operates from the United States. By using the service from outside the U.S., you consent to your data being processed in the U.S. EU residents may exercise GDPR rights (access, rectification, erasure, data portability, objection) by emailing [email protected].
The service is not directed at anyone under 18. We do not knowingly collect data from minors.
This policy may be updated. Active subscribers receive notice of material changes by email at least 30 days before the change takes effect.