Privacy Policy

Last updated: August 3, 2026

1 - Introduction

Flawed Leader LLC ("Flawed Leader," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have, when you visit flawedleader.com, purchase our Culture Kits, create an account on our learning platform, or use the AI coaching companion built into our kits.

By using our website or services, you agree to the practices described here. If you do not agree, please do not use the website or services.

2 - Information We Collect

2.1 Information you provide to us

Name and email address when you subscribe to our email list or notify-me forms.
Name, email, and billing details when you purchase a kit or bundle on flawedleader.com. Payment is handled by our website's payment processor; we receive confirmation of your purchase but do not collect or store your full card number.
Account information when you create an account on our learning platform (LearnWorlds).
Name, email, and message content when you contact us.
Your responses, reflections, and any context you choose to share while working through a kit with the coaching companion (see Section 4). This can include optional context about your role and organization, and the notes and work product you create.

2.2 Information collected automatically

When you visit our website, we and our service providers may automatically collect: browser type, device and operating system information, IP address and general (country or region level) location, pages visited and links clicked, referring website, and similar usage data. This information is collected through cookies, pixels, and similar technologies described in Section 6.

3 - AI Coaching Companion: How it works and Handles Your Data

3.1 Signing in with Google

To use the coaching companion, you sign in with your Google account. We use Google's OAuth to authenticate you and to create and update documents in your own Google Drive on your behalf. After you sign in, a session cookie (named fl_session) is set so the companion can keep you signed in during your session. We do not use browser local storage to hold your identity.

3.2 How the AI processes what you write

As you work through a kit, your written responses, the current session's exchange, and the contents of your kit document are sent to our AI provider, Anthropic (the maker of Claude), to generate the companion's coaching responses in real time. The companion is designed to guide your own thinking, not to produce your answers for you.

We do not use your kit content to train any AI model, and Anthropic processes your inputs only to return responses to you, not to train its models or for its own purposes.

3.3 Where your work is stored: your Google Drive and your Notion

The durable record of your work lives in accounts you own and control, not on our servers:

As you complete each step, your responses and a short AI-generated summary of the session are written to a document in your own Google Drive.
Any context you share at the start of your first kit is written to the top of that same document and travels with it. We do not keep a separate copy of that context; our server reads it in the moment to inform the coaching, then discards it.
When you finish a kit, you can publish your output to your own Notion workspace, where it becomes a page you own.

Because this work lives in your Google Drive and your Notion, you can view, edit, export, or delete it at any time using those accounts, and you can revoke our access to your Google account through your Google security settings. Our servers process this information transiently to run the coaching session and assemble your document; we do not maintain it as our own long-term record.

3.4 Google API Limited Use

Flawed Leader's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account access only to authenticate you and to create and update your kit documents in your Google Drive. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models.

4 - How We Use Your Information

We use the information we collect to:

Process and fulfill your purchases and provide access to your kits.
Operate the AI coaching companion and create and update your kit documents in your Google Drive.
Send transactional messages (receipts, access and account notices).
Send marketing emails and product updates, where you have opted in.
Measure and improve our website, kits, and the coaching companion.
Advertise and retarget our products, including through the pixels described in Sections 6 and 7.
Respond to your inquiries and provide support.
Comply with legal obligations and protect against fraud and misuse.

5 - Cookies, Pixels, and Similar Technologies

Our website is built on Wix and our courses are delivered through LearnWorlds; both set essential cookies, and non-essential (analytics and advertising) cookies load only after consent through our cookie banner, which is configured for CCPA and GDPR. We use cookies and similar technologies for three purposes.

Essential. Required for the site and the coaching companion to work, including the fl_session sign-in cookie, and cart and account cookies on our website and learning platform. These cannot be turned off.
Analytics. Help us understand how visitors use the site so we can improve it. Used with your consent where required.
Advertising. Set by us and by advertising partners to measure campaigns and show you relevant ads on other sites (see Section 7). Used with your consent where required.

You can manage non-essential cookies through the cookie banner on our site and through your browser settings. Where required, we honor recognized browser opt-out signals such as Global Privacy Control (GPC).

6 - Advertising and Marketing

We advertise our products and remarket to people who have visited our site. To do this, we use advertising and measurement pixels and tags, including the Google Ads and Google Analytics tags and the Meta (Facebook and Instagram) Pixel, and we may run retargeting and retention campaigns across these platforms and email.

These pixels collect online identifiers and activity data and share it with the advertising platforms so we can measure our ads and show them to relevant audiences across other websites and apps. Under some privacy laws, this kind of cross-context behavioral advertising is treated as "sharing" (and, in some cases, a "sale") of personal information, even though no money changes hands for your data. You can opt out as described in Section 9, including through our cookie banner, recognized browser signals, and the "Do Not Sell or Share My Personal Information" control.

7 - How We Share Information

We do not sell your personal information for money. We share information with the service providers and partners that make our website and coaching companion work, and with advertising platforms as described in Section 6. Providers act on our behalf under contracts that limit them to providing services to us. Naming every vendor is not required by law, so we disclose the categories below and name the integrations you interact with directly:

Website, learning, and hosting platforms: the providers that host our website, your account and kits, and the infrastructure that runs the coaching service.
Payment processing: the processor that handles your payment when you buy a kit or bundle.
Google: for sign-in and for creating and updating documents in your own Google Drive, as described in Section 3.
Notion: when you choose to publish your finished work to your own Notion workspace.
Anthropic: which powers the coaching companion and generates its responses.
Email marketing platform: to send you updates you opt into.
Analytics and advertising partners: such as Google and Meta, as described in Section 6.

We may also disclose information if required by law, or to protect the rights, safety, or property of Flawed Leader, our customers, or others.

8 - Your Privacy Rights and Choices

8.1 California residents (CCPA/CPRA)

Depending on the year and our size, we may or may not meet the thresholds that make the CCPA/CPRA legally binding on us. Regardless, we aim to honor the following choices for California residents:

Right to know the categories and specific pieces of personal information we collect, use, and disclose.
Right to delete personal information we hold about you, subject to legal exceptions.
Right to correct inaccurate personal information.
Right to opt out of the "sale" or "sharing" of personal information (including the advertising activity in Section 6).
Right to limit the use of sensitive personal information.
Right not to be discriminated against for exercising these rights.

To opt out of sharing for advertising, use the "Do Not Sell or Share My Personal Information" link, our cookie banner, or a recognized browser opt-out signal. To exercise other rights, contact us using Section 12.

8.2 Other U.S. states

Residents of other states with privacy laws (for example, Virginia, Colorado, Connecticut, and others) may have similar rights to access, correct, delete, and opt out of targeted advertising. We aim to honor these requests as well; contact us using Section 12.

8.3 If you are in the EU, UK, or EEA

If we knowingly offer services to visitors in these regions, additional rights apply under the GDPR and UK GDPR, including access, correction, deletion, restriction, portability, and objection, and we would rely on lawful bases such as your consent, performance of a contract, and our legitimate interests. International transfers of data would be made under appropriate safeguards.

9 - Data Retention

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations (for example, retaining purchase records for tax purposes), to resolve disputes, and to enforce our agreements. The work you create through the coaching companion lives in your own Google Drive and Notion and is retained and deleted by you. You can request deletion of information we hold using Section 12.

10 - Data Security

We use reasonable technical and organizational measures to protect personal information. Payment information is handled by our payment processor and is not stored on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11 - Children's Privacy

Our website and services are not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

12 - Email Communication

If you opt into marketing emails, you can unsubscribe at any time using the link in any email or by contacting us. Unsubscribing from marketing emails does not affect transactional messages about purchases you have made.

13 - Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, where appropriate, provide additional notice.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us at hello@flawedleader.com.