Privacy Policy
Last updated July 11, 2026
This policy explains what Sanctum Insider (operated by Project AD LLC) collects, why, and the choices you have.
1. What we collect
- Account data — email address, display name, handle, avatar, and profile details you choose to add.
- Content you create — forum threads, replies, reactions, reports, and messages you post to the community. Community content is visible to other signed-in members; write with that in mind, especially for personal health information you choose to share.
- Billing data — your subscription tier, status, and purchase history. Card details are collected and stored by Stripe, our payment processor. We never see or store your card number.
- Usage data — pages visited, features used, and a first-party analytics identifier (see Cookies below), collected via PostHog and Vercel Analytics to understand and improve the product.
- AI interactions — questions you send to the AI assistant, and community posts processed by our automated moderation classifier, are processed by Anthropic on our behalf.
2. How we use it
- Operating the community, your account, and your membership.
- Processing payments and managing subscriptions.
- Sending transactional email — receipts, subscription updates, authentication links, and notifications.
- Moderating content to keep the community safe and compliant.
- Understanding usage so we can improve the product.
We do not sell your personal information.
3. Who processes it for us
We use a small set of service providers, each processing data only to provide their service to us:
- Supabase — database, authentication, and file storage.
- Stripe — payments, subscriptions, and billing portal.
- PostHog and Vercel Analytics — product analytics.
- Vercel — application hosting.
- Resend — transactional email delivery.
- Anthropic — AI assistant responses and automated content moderation.
- Upstash — rate limiting and caching infrastructure.
- Mux — video hosting and streaming (when video content is live).
Beyond these processors, we disclose personal data only if required by law or to protect the safety of members and the platform.
4. Cookies and identifiers
- Authentication cookies (Supabase) — keep you signed in. Strictly necessary.
- ph_distinct_id — a first-party analytics identifier set for up to one year, plus PostHog’s own cookies, used to measure product usage.
If you would like your analytics history unlinked or removed, contact us at the address below.
5. Retention and deletion
We keep account data while your account exists. You can request deletion of your account and associated personal data at any time by emailing nick@projectad.me from your account email. Billing records are retained as required for tax and accounting law. Community posts may be anonymized rather than deleted where removal would break other members’ threads.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us and we will honor applicable requests. If you are in the EEA or UK, you may also lodge a complaint with your local supervisory authority.
7. Age
Sanctum Insider is for adults. We do not knowingly collect data from anyone under 18; accounts found to belong to minors are removed.
8. Changes and contact
We will update this page when our data practices change and note the date at the top. Questions or requests: nick@projectad.me. See also our Terms of Service and Refund Policy.