Privacy
Who is responsible
The Human Advantage (Tomás Dostal Freire, sole proprietorship), trading as Gerty is the controller of the details we hold about you as a customer.
What we keep, and why
Your name, email, billing details (including company name and VAT ID if you buy as a company), country and payment status, to deliver the kit, handle a support question, and keep the accounting records the law requires (seven years for invoices and payment records). We record when your download link was used, to check delivery worked and to enforce the download limit. The link log is kept 12 months.
If you book a session, we also keep your intake answers and your booking, to prepare and hold the session. If you buy a gift, we keep your name, the recipient’s name if you add it, the line you write for the voucher and the voucher code, to send you the voucher and let the recipient redeem it; when they redeem it, we keep the name they enter (and, for a platform that is not ready yet, their email, to send their kit on the release date). If you join the waitlist, we keep your email to write to you when a week opens. We record the campaign or link you came from, to know which of our messages work.
The notify list
Before orders open, the buy buttons ask for your email instead of a payment. We keep that email, the package you clicked, the share tag in the link you came from (if any) and the date, in one file on our server. We use it for one thing: Tomás writes to you once when orders open. We send nothing else and we do not add you to a newsletter. Once that email has gone out, Tomás deletes the list. Ask us any time to take you off it.
How we measure the site
We use PostHog (EU servers, Frankfurt) to see how people use these pages: which pages are viewed, how far people scroll, which buttons and questions they click, whether the welcome video is played and how far, and page speed. It runs without cookies and stores nothing on your device: PostHog counts a visitor with a hash of the IP address and browser that it changes every day, so it cannot follow you from one day to the next or across other sites. We do not record your screen or your typing, we never send your email or anything you type into a form, and we do not build a profile of you. The events travel through our own server (the address /ingest on this site). We also note the share tag in a link (for example ?src=anna) and campaign tags (utm_*), so we can see which shared link brought a visit.
Basis: legitimate interest, to learn whether the product is useful before it opens. To opt out, block scripts from this site or use a tracker blocker; the site works the same.
Comments from reviewers
If Tomás sends you a review link (one with review=1), a Comment button lets you pin notes on the page. Your notes and the page element they belong to are sent to our server and kept for this review. They are also kept in your browser so you can edit them, until you clear them. The switch itself lasts only for that browser tab. Normal visitors never see this.
Our basis
Contract (delivering the kit, the session and gifts), legal obligation (accounting records), and legitimate interest (the link log, understanding which campaigns work, and preventing fraud and misuse).
What we never receive
The kit has no upload. Your writing, your interview answers and the files you build stay in your own Claude account, and we do not receive them. Please do not send them to us in support emails either.
Who handles your details for us
- Stripe, which takes your payment and sends the receipt and invoice. For its own payment, fraud and legal checks Stripe is a controller in its own right; see Stripe’s privacy notice.
- Resend, which sends our emails.
- Cal.com, which holds your session booking.
- Our hosting provider (Railway, EU region), which serves this site and the download and keeps standard server logs that can include your IP address.
- PostHog (EU cloud), which receives the site measurements described above.
Some of these are US companies; where your details leave the EU they are covered by the EU standard contractual clauses or the EU-US Data Privacy Framework, where the vendor offers them.
Claude is separate
When you use the kit you send your material to Claude. Anthropic decides how that is kept and used, under its terms and your own privacy settings. We are not part of that and cannot promise anything about it. The kit tells you where to check.
Your rights
See, correct, delete or take a copy of your details, object or restrict use: email tomas@tha.works. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Cookies: this site sets no cookies and stores nothing on your device for measurement. The only browser storage is the reviewer comment tool above, which you turn on yourself. The fonts are served from this site. Stripe’s checkout page sets its own cookies; see Stripe’s notice.