Privacy Policy

1. Who We Are

ChrisGTP is a personal brand and digital product business operated by Chris Escobar, based in the United States. We publish AI-leveraged business strategy content, a weekly email newsletter (The ChrisGTP Letter), and sell digital products including the ChrisGTP Starter Vault.

For questions about this Privacy Policy, contact us at: [email protected]

2. Information We Collect

Information you provide directly

• Email address — when you subscribe to our newsletter or submit a contact form
• Name — if you provide it when subscribing or purchasing
• Payment information — processed securely through Stripe; we do not store your card details
• Purchase details — product name, amount, and transaction date when you buy a digital product
• Communications — emails or messages you send us

Information collected automatically

• IP address and approximate location — collected by our hosting provider (WordPress.com / WP Engine)
• Browser type and device information — collected via standard server logs
• Pages visited and time spent — collected via analytics tools (see Section 6)
• Email engagement data — opens, clicks, and unsubscribes tracked by Kit (our email platform)
• Cookies and similar technologies — see Section 7

Information we do not collect

We do not collect sensitive personal information such as Social Security numbers, financial account numbers (beyond what Stripe processes), health data, racial or ethnic origin, or biometric data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver the newsletter — sending The ChrisGTP Letter to subscribers who have opted in
• To process purchases — completing your order, delivering digital products, and sending receipts
• To communicate with you — responding to inquiries and providing customer support
• To improve our content and products — understanding what content resonates and how to serve our audience better
• To comply with legal obligations — maintaining transaction records as required by law
• To protect against fraud — detecting and preventing fraudulent transactions

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using your personal information depends on the data in question:

• Consent — for newsletter subscriptions; you may withdraw consent at any time by clicking “Unsubscribe” in any email
• Contract performance — to fulfill digital product purchases you initiate
• Legitimate interests — for analytics and improving our content, where those interests are not overridden by your rights
• Legal obligation — for retaining transaction records as required by applicable law

5. How We Share Your Information

We share personal information only with the following categories of service providers, solely to operate our business:

• Kit (formerly ConvertKit) — our email newsletter platform, which stores subscriber email addresses and sends emails on our behalf. Kit is subject to its own privacy policy at kit.com/privacy.
• Stripe — our payment processor. Stripe processes your payment information under its own privacy policy at stripe.com/privacy. We receive only a transaction confirmation; we never see your full card details.
• WordPress / WP Engine — our website hosting provider, which processes server logs and may store basic visitor data.
• Google Analytics (if applicable) — for website traffic analytics. We use anonymized data and have IP anonymization enabled where possible.

We do not share your information with advertisers, data brokers, or any third party for their own marketing purposes. We may disclose information if required by law, court order, or to protect our legal rights.

6. Data Retention

• Newsletter subscribers — we retain your email address and engagement data for as long as you remain subscribed. If you unsubscribe, your email is suppressed (kept on a do-not-email list) to honor your opt-out, or deleted on request.
• Purchase records — retained for 7 years to comply with tax and accounting obligations.
• Website analytics — anonymized data retained per the settings of our analytics provider (typically 14–26 months).
• Communications — emails you send us are retained for as long as necessary to address your inquiry, typically no longer than 2 years.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies — required for the website to function (WordPress session cookies, Stripe checkout security)
• Analytics cookies — to understand how visitors use our site (e.g., Google Analytics, if enabled)
• Email tracking pixels — Kit embeds a small tracking pixel in our newsletter emails to measure open rates

You can control cookies through your browser settings. Disabling cookies may affect certain website functionality. EU visitors will be presented with a cookie consent mechanism where required by applicable law.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For everyone

• Unsubscribe — click the unsubscribe link in any newsletter email at any time
• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate information
• Deletion — request that we delete your personal information (subject to legal retention obligations)

California residents (CCPA/CPRA)

California residents have the right to: know what personal information we collect and how we use it; request deletion of personal information; opt out of the “sale” or “sharing” of personal information (we do not sell or share your data for advertising); and non-discrimination for exercising your rights.

EEA / UK residents (GDPR / UK GDPR)

In addition to the rights above, EEA and UK residents have the right to: data portability; object to processing based on legitimate interests; withdraw consent at any time; and lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Children’s Privacy

ChrisGTP is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately at [email protected] and we will delete it promptly.

10. International Data Transfers

ChrisGTP is operated from the United States. If you are accessing our site or subscribing to our newsletter from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. Our service providers (Kit, Stripe, WordPress) may also process data in other jurisdictions. We take steps to ensure appropriate safeguards are in place for such transfers where required by applicable law.

11. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted to and from our website
• Payment processing exclusively through Stripe’s PCI-DSS compliant infrastructure
• Use of reputable third-party platforms (Kit, WordPress) with their own security programs

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry-standard practices.

12. Third-Party Links

Our website and newsletter may contain links to third-party websites and services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify subscribers by email. Your continued use of our website or subscription to our newsletter after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us