Sebesta & Co ("we," "us") operates sebesta.co. This policy describes what we collect, how we use it, and the choices you have. The short version: we collect only what you type into the assessment, we use it only to prepare and send your assessment, we don't run analytics or ad trackers, and we never sell your information.
What we collect
- Assessment inputs. The selections and figures you choose on the page (observations, answers to the three questions, workflow numbers), and anything you type into the "something else" field.
- Email address. Collected only if you request the written assessment.
- Technical basics. Our hosting provider (Cloudflare) processes IP addresses and request logs as part of serving the site and preventing abuse. We set no cookies and run no analytics or advertising trackers.
We do not knowingly collect information from anyone under 16, and the site is not directed at children.
How we use it
- To generate your written 3x Assessment and deliver it to the email you provide.
- To follow up with you about your assessment. That's the point of the exercise.
- To operate and secure the website.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. No cookies, no ad pixels, no analytics profiles.
How AI is involved
- Your written assessment is generated by an artificial-intelligence model. Your assessment inputs are sent to our AI provider (Anthropic) to produce it; your email address is not included in that request.
- We do not use your information to train AI models.
- AI-generated content can be imperfect. The assessment is informational: a first read, not professional, legal, or financial advice. Engagement decisions are always made by a human.
Who touches the data
Service providers acting on our behalf, bound to use the data only to provide their service:
- Cloudflare: website hosting and delivery.
- Anthropic: AI generation of the assessment.
- Resend: email delivery.
- Google: fonts are served from Google Fonts (your browser requests them from Google, which sees your IP address), and our booking link goes to Google Calendar, which has its own privacy policy.
We may also disclose information if required by law. We have not sold or shared personal information in the preceding 12 months.
How long we keep it
Assessment records and correspondence are kept as long as useful for the conversation you started, then deleted. Ask us to delete yours at any time (below) and we will, unless the law requires otherwise.
Your rights (including CCPA/CPRA)
If you are a California resident (and as a courtesy, wherever you are) you may request:
- To know / access the personal information we hold about you, including categories, sources, and purposes.
- To correct inaccurate personal information.
- To delete your personal information.
- To opt out of sale or sharing. Noted, though we don't sell or share personal information.
- Non-discrimination. Exercising these rights never changes how we treat you.
To exercise any of these, email hello@sebesta.co with the address you used on the site. We'll verify the request by replying to that address and respond within 45 days. You may use an authorized agent; we'll verify with you directly.
Security
The site is served over HTTPS; assessment generation happens server-side, and API credentials are never exposed to your browser. No method of transmission is perfectly secure, but we keep the surface small: we store the minimum and track nothing.
Changes
If this policy changes, we'll update this page and the effective date above. Material changes to how we handle existing data will be flagged clearly.
Contact
Sebesta & Co · hello@sebesta.co · 559-321-7959