Privacy Policy

Introduction

The Human Array, LLC (“The Human Array,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at thehumanarray.com (the “Site”).

Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

Information We Collect

Information You Provide to Us

When you submit information through our intake form (powered by Typeform), we may collect:

• First and last name
• Email address
• Company name
• Professional title or designation
• Description of your services or practice
• Profession category
• Whether you offer remote or virtual services
• Business address (if you have a physical location)
• Social media links
• Photo

Information Seekers Provide

When you create a seeker account, we collect:

• Email address and display name
• Enrollment and program participation history
• Privacy consent preferences

Wisdom Well & Journal Data

When you use the Wisdom Well or Journal, your data is handled as follows:

• Encrypted (only you can read): Your personal notes, saved links/URLs, and uploaded files. These are encrypted using per-user encryption keys and are never accessed by The Human Array team.
• Not encrypted (powers your experience): Titles you give your items, tags, and collections. These enable search, filtering, and organization within your Well. They are visible to The Human Array team to help us understand what matters to our community and improve the platform.

Your uploaded files are encrypted at rest and are never decrypted or accessed by anyone but you — even if you choose to share other content with The Human Array team in the future.

Programs & Enrollment Data

When you enroll in programs through The Human Array, your data is handled as follows:

• Always private: Your notes, reflections, and submissions within programs are personal content that only you can access.
• Visible to The Human Array (in aggregate): Your enrollment status and progression (e.g. percentage complete) help us improve programs for everyone. This data is used in aggregate — no individual content is ever exposed.
• Bookmarks: Items you bookmark from the directory are visible to The Human Array to help us understand what matters to our community. The content you save about those bookmarks (notes, tags) follows the same rules as your Wisdom Well data.

Information Collected Automatically

We use Fathom Analytics, a privacy-focused analytics service. Unlike traditional analytics, Fathom does not use cookies, does not track individuals, and does not collect personal data. Fathom collects only:

• Aggregate page view counts
• Referrer source (in aggregate)
• Country-level location (derived from anonymized, non-stored IP hashes)
• General browser and device categories (in aggregate, for statistics only)

Fathom does not store IP addresses, track individual users, or collect personal information. We see “100 people visited this page” — not “John from Boston visited at 3pm.” Learn more at Fathom's Privacy Policy.

How We Use Your Information

We use the information we collect to:

• Populate and maintain our directory of wellness and health practitioners
• Provide personalized recommendations for seekers (with your consent)
• Understand community wellness interests through anonymized patterns from Wisdom Well titles, tags, and collections (with your consent)
• Respond to your inquiries and communicate with you
• Improve our Site and user experience
• Analyze Site traffic and usage patterns
• Send you information about our services (with your consent where required)
• Comply with legal obligations
• Protect against fraudulent or unauthorized activity

Cookies and Tracking Technologies

We use minimal cookies. Our analytics are cookieless and our Site does not use tracking cookies. For detailed information, please see our Cookie Policy.

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off. They include:

• Supabase Authentication: We use Supabase for user authentication and session management. These cookies are required for secure login functionality.

Analytics (Active)

• Fathom Analytics: We use Fathom Analytics, a privacy-focused analytics service that does not use cookies and does not collect personal data. Fathom is GDPR, CCPA, and PECR compliant by design. This service runs automatically under legitimate interest as it does not track individuals. Learn more at Fathom's Privacy Policy.

Analytics (Not Currently Active)

The following services are not currently active but may be enabled in the future. If enabled, you will be prompted to provide consent:

• Google Analytics: We may use Google Analytics to understand how visitors interact with our Site.
• Google Tag Manager: We may use Google Tag Manager to manage and deploy marketing tags on our Site.

Marketing and Advertising Cookies (Not Currently Active)

The following services are not currently active but may be enabled in the future. If enabled, you will be prompted to provide consent:

• Meta (Facebook) Pixel: We may use the Meta Pixel to measure the effectiveness of our advertising.
• Pinterest Tag: We may use the Pinterest Tag to track conversions and optimize advertising.
• TikTok Pixel: We may use the TikTok Pixel to measure advertising effectiveness.

Your Cookie Choices

Because we use cookieless analytics (Fathom) and only one essential authentication cookie (Supabase), there are no tracking cookies to manage. The authentication cookie is required for login functionality and cannot be disabled while your account is active.

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf:

Currently Active:

• Typeform: Form hosting and data collection for intake forms. Privacy Policy
• Supabase: Database hosting, authentication, and backend services (EU servers). Privacy Policy
• Vercel: Website hosting and deployment. Privacy Policy
• Fathom Analytics: Privacy-focused website analytics (no personal data collected). Privacy Policy
• Kit (formerly ConvertKit): Email marketing platform for newsletters and communications. Privacy Policy | Terms
• Resend: Transactional email delivery service for account notifications and system emails. Resend tracks email delivery status, opens, and link clicks to help us ensure emails are delivered successfully. Privacy Policy
• Slack: Internal team communication and workflow notifications. We may receive automated alerts about account activity, support requests, or system events. Your personal data is not stored in Slack; only operational notifications are sent. Privacy Policy

Not Currently Active (Reserved for Future Use):

• Google: Analytics and tag management
• Meta, Pinterest, TikTok: Advertising and marketing

Directory Listings

If you submit information to be listed in our directory, your professional information (such as name, business name, title, description, profession, location, and photo) will be publicly displayed on our Site. Contact information such as your email address will not be publicly displayed without your explicit consent. You can hide your profile from the directory at any time from your account settings.

Client Reviews

If you enable reviews on your profile, clients can leave feedback about their experience with you. Reviews help build trust and visibility. You can respond to reviews publicly. We verify reviews to ensure authenticity — you cannot remove legitimate reviews, but you can report inappropriate content for our review. You can disable the reviews feature entirely from your account settings.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers

If The Human Array is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

AI Usage

We use artificial intelligence to improve our services. During account registration, you may be asked to consent to the following:

Internal AI Training

With your consent, we may use your content to train internal AI models that improve search, matching, and recommendations within our platform. This AI is used exclusively within The Human Array ecosystem and is not shared with or sold to third parties. Please note that once AI learns from data, that learning persists even if the original data is later deleted — similar to how a person cannot “unlearn” something they've read.

External AI Visibility

With your consent, we may optimize your public profile to be discoverable by external AI systems and search engines (such as Google AI, ChatGPT, and similar services). This helps seekers find you through AI-powered searches. Your profile is already publicly visible — this setting specifically enables AI indexing and optimization.

Photo AI Settings

You can choose how your photos are used in AI training: include them as-is, automatically blur faces for privacy, or exclude photos entirely. This setting only affects AI training — your photos always display normally on your profile to human visitors.

You can change your AI preferences at any time from your account settings.

Seeker AI Personalization

With your consent, we use your profile, enrollment history, activity, and Wisdom Well structure (titles, tags, collections) to recommend practitioners, programs, and content tailored to your wellness journey. We use API-based AI services that do not train on your data. Your data stays within The Human Array ecosystem and is never sold to third parties.

Anonymous Platform Improvement

With your consent, we use anonymized, aggregated patterns from seeker activity — including how you organize your Wisdom Well — to improve search, recommendations, and the overall platform experience for everyone. No individual data is ever exposed.

AI-Powered Features

When you use AI-powered features (such as profile generation from your website, SEO optimization, or inline suggestions), your content is sent to our AI provider for processing. Each use is logged with your explicit consent. Our AI provider does not train on API data — your content is processed and discarded.

Communications

We may send you the following types of communications:

• Essential emails: Account verification, password resets, security alerts, and important service updates. These cannot be opted out of while your account is active.
• Platform updates: News about new features, improvements, and changes to the directory. Optional — you can unsubscribe anytime.
• Daily Dose: Our wellness tips and inspiration newsletter. Optional — you can unsubscribe anytime.
• Marketing: Occasional promotions and partnership opportunities. Optional — you can unsubscribe anytime.

We respect your inbox. Marketing emails are sent weekly at most, usually less. Every non-essential email includes an unsubscribe link. You can manage your communication preferences from your account settings.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Profile data: Retained while your account is active, or until you request deletion
• Wisdom Well & Journal data: Retained while your account is active. Encrypted content is permanently destroyed (crypto-shredded) upon account deletion — once your encryption key is deleted, your encrypted data becomes unrecoverable.
• Email logs: Retained for 90 days for troubleshooting and delivery verification
• Unsubscribe records: Retained for 2 years minimum (CAN-SPAM compliance)
• Consent records: Retained for 7 years (legal audit trail, includes full history of consent grants and revocations)
• Analytics data: Fathom does not retain individual user data; only aggregate statistics are stored

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

All Users

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct inaccurate or incomplete information
• Deletion: You may request that we delete your personal information. We provide a 30-day grace period during which you can cancel the deletion and export your data.
• Data portability: You can export all your data at any time from your account settings. Your export includes a JSON file (structured data), CSV files (spreadsheet-compatible), and a ZIP archive containing all your uploaded files and images.
• Consent revocation: You can change any privacy consent at any time from your account settings. Every change is recorded with a timestamp in our audit trail.
• Opt-out of marketing: You may unsubscribe from marketing communications at any time

For California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at hello@thehumanarray.com.

For European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing of your personal data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your personal data based on:

• Consent: When you provide explicit yes/no answers to privacy preferences during registration or the consent check page. You can revoke consent at any time from your account settings.
• Legitimate interests: For cookieless analytics and improving our services
• Contractual necessity: To provide the services you signed up for
• Legal obligations: When required by law

To exercise your GDPR rights, contact us at hello@thehumanarray.com.

For Canadian Residents (PIPEDA)

If you are a Canadian resident, you have the right to:

• Access your personal information
• Challenge the accuracy of your personal information
• Withdraw consent to the collection, use, or disclosure of your personal information

To exercise your PIPEDA rights, contact us at hello@thehumanarray.com.

International Data Transfers

Your information is stored and processed in the United States. Our infrastructure providers include Supabase (database and authentication), Vercel (website hosting), and Kit (email delivery) — all US-based. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

For Wisdom Well and Journal data, your encrypted content (notes, links, files) is protected by per-user encryption keys regardless of where the data is stored. Even in the event of a data breach, encrypted content would be unreadable without the corresponding key.

Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• Encryption at rest: Wisdom Well and Journal content (notes, links, files) is encrypted using per-user encryption keys
• Row-level security: Database access is enforced at the row level — users can only access their own data
• Cookieless analytics: We use Fathom Analytics, which does not track individuals or use cookies
• Audit trail: Every consent decision (grant or revocation) is recorded with a timestamp, preserving a complete history

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our Site is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. Your continued use of the Site after any changes constitutes your acceptance of the new Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: