Privacy Policy

This Privacy Policy explains how information is collected, used, shared, and protected when you visit timkinzie.com (the "Website"), the personal website of Tim Kinzie ("Tim," "we," "us," or "our"), who is based in North Carolina, United States.

The Website is built and operated on Tim's behalf by Timatsu LLC, a North Carolina limited liability company. Timatsu LLC hosts the Website, runs its AI features, and receives the messages and signups sent through it at hello@timatsu.com and in its database. In short: the Website has no third-party analytics, no advertising, and no tracking cookies (it counts page views on its own server, without cookies, as described below), and what you send us is used to respond to you. Capitalized terms not defined here have the meaning given in our Terms of Service.

What This Policy Covers, and What It Does Not

This Policy Covers the Website

This policy applies to information collected through timkinzie.com itself: when you browse the site, send a message, chat with the assistant, sign up for the newsletter, use the Soul Codex or the free self-assessment tools, open a private link, or sign in.

Other Companies and Applications Are Separate

Some of the work featured on this Website is done through companies Tim founded or works with, including Timatsu LLC, and the software applications they build. Apart from Timatsu LLC's role in building and operating this Website, those companies and applications are separate. When you visit one of their websites, use one of their applications, or contact them directly, that use is governed by their own terms and privacy policies, not by this one.

Ventures Highlighted Here Are Separate

This Website highlights ventures connected to Tim. Where applicable, these are separate legal entities with their own operations, websites, and privacy practices. Featuring a venture does not make Tim responsible for its products, services, or data practices. If you visit a venture's own website or contact it directly, that interaction is governed by that venture's own terms and privacy policy.

Information We Collect

We aim to collect as little as possible. Here is everything the Website collects.

Contact Form

When you use the contact form, we collect your name, your email address, and your message. Submitting the form emails your message to our inbox at hello@timatsu.com, sends a confirmation email with a copy of your message to the address you entered, and stores the message in Timatsu LLC's database. If sending fails, the form instead opens a message in your own email program, addressed to hello@timatsu.com.

AI Assistant

The Website offers an AI assistant. Before you can chat, it asks for your name and email address. When you chat, we collect the messages you send and the assistant's replies. Your messages are processed by AI model providers, reached through a model router, to generate the replies and, when you choose to send the conversation to us, a short summary for Tim.

You can send the conversation to us yourself. If you do not, and you have sent at least one message, the whole conversation is sent to us automatically when you leave the page or switch away from it, even if you never pressed Send. Either way, the conversation is emailed to our inbox at hello@timatsu.com, a confirmation email with a copy of the conversation is sent to the email address you entered, and the conversation is stored in Timatsu LLC's database. The assistant is not a secure channel, so please do not enter passwords, payment details, or government identifiers.

Newsletter

If you sign up for the newsletter, we collect your email address and the page you signed up from. We store them in Timatsu LLC's database and email you a link to confirm. You are not on the list, and we send you no newsletter, until you click that link. After you confirm, your address is also added to the list kept by our email delivery provider, and we email our inbox so we know you joined. Our email delivery provider tells us whether each newsletter email was delivered or bounced, and we keep that record. We use your address only to send you the newsletter. Each newsletter email has an unsubscribe link, or you can write to hello@timatsu.com.

Soul Codex and Mikey

The Soul Codex asks for a birth date, a birth time, and a birth place (city, state or region, and country). To produce a reading, the Website sends the birth place to a geocoding service to find its coordinates, and sends the birth date, time, and place, together with the computed chart positions, to an AI model provider, reached through a model router, to write the reading. Finished readings are held in the server's memory, keyed by the birth details, so the same details return the same reading without another AI request. A reading has no set expiry, and that memory is cleared whenever the server restarts. Birth details and readings are not written to a database, and entering them does not send them to our inbox.

The Mikey chat on the same page sends the messages you type to an AI model provider, reached through the same model router, to generate replies. Mikey conversations are not stored by the Website and are not sent to our inbox.

Self-Assessment Tools

The Website offers free self-assessment tools, such as the Business MRI and the Risk MRI. Your answers are scored in your browser and are not sent to us while you take a tool. Only if you then choose to request a follow-up from the Business MRI are your name, email address, any note you add, and a summary of your results sent to us, the same way a contact-form message is.

Sign-In Area

The pages under /dashboard are a private area for authorized accounts only; the public cannot sign in to it. When an authorized user signs in, we check their email address and password against Timatsu LLC's account system and set a session cookie, described under Cookies and Local Storage below.

Private Links

Tim sometimes shares work through a private link, which only people who receive it can open. These pages are not listed in search engines. A voice note is read in an AI voice made from Tim's own voice, so what you hear is not a recording of him speaking. We count a play when someone presses Play or Download, and the note keeps that count and the date of the latest play. A Business MRI report link shows a saved copy of a client's report. The link expires after three days unless Tim sets a different period of up to 30 days, and Tim can turn it off sooner. We count the views of each report. A shared presentation asks for an access code that Tim gives the presenter. When you enter the correct code, the Website sets a secure, HttpOnly cookie whose name begins with dk_share_, so you do not have to enter the code again on that link for 14 days.

Information Collected Automatically

When you visit the Website, our hosting provider automatically receives standard technical information that your browser sends in order to load a page, such as your IP address, browser type, the pages you request, the referring page, and the date and time. To prevent spam and abuse of the AI features and forms, the Website keeps short-lived request counters tied to your IP address, some in server memory and some in Timatsu LLC's database. The database counters are deleted within two days.

Page View Counts

To see which pages are read, the Website counts page views on its own server. For each view of a public page it records the page address, the site that linked to it (only the site name), a campaign tag if the link carried one, whether the device is a phone, tablet or computer, and the country reported by our host. It sets no cookie and stores no IP address. To count a person once a day, it keeps a one-way scrambled code made from that day's date, your IP address and your browser details; the code changes every day, so visits cannot be linked across days or traced back to you. Nothing is counted on private or sign-in pages, or when your browser sends Do Not Track or Global Privacy Control. The counts are stored in Timatsu LLC's database and are seen only by site admins.

Cookies and Local Storage

The Website uses no third-party analytics, no advertising, and no tracking cookies. It uses only these items:

• Cookie notice. When you dismiss the cookie notice by pressing Got It, your browser's local storage remembers that choice so the notice does not appear again. The notice is informational; there are no optional cookies to accept or decline.
• Session cookie. Only if you sign in to the private area, the Website sets a secure, HttpOnly cookie named tk_session that keeps you signed in for up to 30 days or until you sign out.
• Shared-presentation cookie. Only if you open a shared presentation and enter its access code, the Website sets a secure, HttpOnly cookie whose name begins with dk_share_. It works for that one link and lasts 14 days.
• Safe Mode cookie. Only when Tim hands his Digital Self to a guest on his own device, the Website sets a secure, HttpOnly cookie named tk_safe for up to 12 hours, which keeps that browser on the Digital Self page until Tim ends Safe Mode. The guest's conversation is saved under their name so Tim can read it.

You can clear cookies and local storage through your browser settings at any time.

What We Do Not Collect

The Website does not knowingly collect payment card numbers, government identifiers, precise geolocation, or biometric data.

Categories of Personal Information (for Reference)

For readers in jurisdictions that ask businesses to map their collection to standard categories (such as California), the personal information the Website collects falls into these categories: identifiers (such as name, email address, and IP address); internet or other electronic network activity (such as pages requested and basic browser information); the contents of communications you send us; and birth date, time, and place if you use the Soul Codex. We collect these from you directly and from the technical information your browser sends.

How We Use Information

We use the information described above to: operate and secure the Website; answer you through the assistant, Mikey, and the Soul Codex; read and respond to your messages; keep a record of our correspondence; send the newsletter to people who sign up; let authorized users sign in; prevent spam, fraud, and abuse; and comply with legal obligations and enforce our Terms of Service. If you contact us about working together, we use your information to discuss it and, if we move forward, to carry out that work under a separate agreement.

We do not use your information for advertising, and we do not make automated decisions about you that produce legal or similarly significant effects.

How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or for other companies' marketing. We share information only in these situations:

• Timatsu LLC. Timatsu LLC builds and operates the Website and receives what you send through it on Tim's behalf, at its inbox hello@timatsu.com and in its database. It uses that information only to operate the Website and to help Tim respond.
• Service providers. A small set of vendors run the Website and process information only as needed to provide their service. See Service Providers below.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or a governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Tim Kinzie, Timatsu LLC, our visitors, or the public, or to investigate fraud or abuse.
• Business transfers. If this Website or its assets are involved in a merger, acquisition, financing, or sale, information may be transferred as part of that transaction, subject to protections consistent with this policy.

Service Providers

The Website relies on a few third-party providers. We list them by category and can name the specific providers on request. Each processes information only as needed to provide its service.

• Hosting and content delivery, which processes connection information such as IP addresses in order to serve the site.
• Database, which stores messages, assistant conversations, newsletter records, page-view counts, voice notes, shared Business MRI reports, account records for the sign-in area, and the short-lived abuse-prevention counters.
• Email delivery, which sends your message to our inbox, your confirmation email, and the newsletter, keeps the newsletter list, and tells us whether each newsletter email was delivered or bounced.
• AI model providers, reached through a model router for the assistant, the Soul Codex, and Mikey, which process what you enter in order to generate replies, summaries, and readings.
• Text-to-speech provider, which turns the text of a voice note into audio in an AI voice made from Tim's own voice.
• Geocoding service, which receives the birth place you enter into the Soul Codex in order to return its coordinates.

Data Retention

We do not delete messages, assistant conversations, newsletter records, or page-view counts on an automatic schedule. We keep messages, assistant conversations, and newsletter records as long as needed to respond to you, to send the newsletter you asked for, and to keep a record of our correspondence, and we delete them when you ask us to, unless we must keep them to comply with a legal obligation, resolve a dispute, or enforce our agreements.

Newsletter records are your email address, the page you signed up from, whether you are pending, confirmed, or unsubscribed, and our provider's delivery records for the newsletter emails sent to you. When you unsubscribe, we mark your address as unsubscribed instead of deleting it, so that we do not email you again. Page-view counts hold no name, email address, or IP address, and a count cannot be traced to you. Voice notes, with their text and audio, are kept until Tim deletes them. A shared Business MRI report stays in the database after its link expires or is turned off, until we delete it. Soul Codex readings live only in server memory, as described above. Abuse-prevention counters in the database are deleted within two days. Our hosting provider keeps its own technical logs for a limited period.

Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encrypted connections and access controls. No website or method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you: to access or receive a copy of it; to correct it; to delete it; to opt out of its sale or sharing; and to limit certain processing. You also have the right not to be treated differently for exercising these rights.

To make a request, email us at hello@timatsu.com. We will verify your request, usually by confirming you control the email address involved, and respond within the timeframe required by applicable law. You may use an authorized agent where the law allows, and we may ask for confirmation of their authority.

We do not sell personal information or share it for advertising, so there is nothing to opt out of. The Website honors Global Privacy Control and Do Not Track signals by not counting your page views, as described under Page View Counts.

United States State Privacy Rights

A growing number of U.S. states, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, have consumer privacy laws. If you are a resident of such a state, you may have the rights described under Your Rights and Choices, including the right to know what personal information is collected and how it is used, the right to access, correct, and delete it, and, in some states, the right to appeal a decision on your request. We do not sell personal information, and we do not process it for targeted advertising. To exercise your rights, or to appeal, contact hello@timatsu.com.

Residents of the EEA, the UK, and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, Tim Kinzie is the controller of the personal data this Website processes, and Timatsu LLC processes it on his behalf. Our legal bases are: steps you ask us to take, such as responding to your message, producing your Soul Codex reading, or sending the newsletter you signed up for; our legitimate interests in operating and securing the Website, preventing abuse, and keeping a record of our correspondence, where those interests are not overridden by your rights; and compliance with legal obligations.

You have the rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact hello@timatsu.com.

International Data Transfers

Tim and Timatsu LLC are based in the United States, and our providers may process information in the United States and other countries. If you use the Website from outside the United States, your information will be transferred to and processed in countries whose data-protection laws may differ from those where you live.

Children's Privacy

The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information through this Website, contact us and we will delete it.

Third-Party Websites and Links

The Website links to other websites, including those of the companies, applications, and ventures described under What This Policy Covers. This policy does not apply to them. When you follow a link, the destination's own privacy policy governs.

Changes to This Policy

We may update this Privacy Policy as the Website changes. When we do, we will revise the "Last updated" date above, and for material changes we will provide more prominent notice on the Website.

Contact

Questions about this Privacy Policy, or requests about your information, can be sent to hello@timatsu.com. For questions about a specific company, application, or venture, please use the contact details it provides.