Your data, explained.
What you share, how the assessment uses it, and how to ask for help with your information.
Policy terms dated June 1, 2026. Interface and factual product descriptions updated October 20, 2026.
1. Who We Are
"The Replaceability Index" is operated by GmanCreations, a sole proprietorship run by Shawn Geeman. When we say "we," "us," or "our," we mean GmanCreations.
2. What We Collect
Here is exactly what data we handle and where it goes:
You enter these to generate your score. They are sent to our API for processing. Your description is used to generate your reading. For paid reports, we also store the description, generated report, purchaser email, and order reference to provide recovery and prevent repeated generation charges. The assessment sends your description to AI providers through OpenRouter. Processing and operational logs may be retained by the services involved, so leave confidential information out of your input.
If you choose to enter your email (for your Pro report or updates), it is processed by Resend (welcome and report emails). We use it only to deliver your report and occasional product updates. We do not sell or rent your email. Service providers process it to operate the product.
All payments are handled by Stripe. Your credit card number, expiration date, and billing details are processed and stored exclusively by Stripe. We never see or store your full card number. We receive payment status, a transaction and customer reference, purchased plan, and checkout email to deliver and verify access.
We use PostHog for product analytics. PostHog collects:
- Page views and navigation patterns
- Button clicks and feature usage
- Purchase links and assessment details are excluded from analytics payloads; session replay is disabled.
- Device type, browser, and approximate location (country/region level)
Analytics data is used to improve the product. We do not use analytics to personally identify you. PostHog data is not sold or shared with advertisers.
We store your most recent score result in your browser's localStorage so you don't lose it if you navigate away. This browser copy stays on your device. Paid reports also have a server copy for recovery. The latest saved reading is treated as expired after 30 days when the app reads it. Checkout recovery state expires after 1 hour. Clearing browser data removes local readings.
The site keeps an anonymous daily count of scans with no personal data.
4. How We Use Your Data
We use the data we collect to:
- Generate your AI replacement risk score and report
- Process your payment (if you buy Pro)
- Deliver your Pro report via email (if you provide one)
- Improve the product based on usage patterns
- Understand aggregate navigation and feature use
Service providers process the information needed to deliver these features. Do not include private client or employer material in your assessment.
5. Third-Party Services
We use the following third-party services. Each has its own privacy policy:
6. Data Retention
- Paid report inputs and reports: Stored to fulfill your order and allow recovery until you request deletion. Deleting a report removes that recovery option; payment and fraud-prevention records may need to be retained.
- Email addresses: Retained until you ask us to delete them.
- Payment records: Stripe retains transaction records per their policies and legal requirements.
- Analytics data: Retention depends on our PostHog account settings and their service policies.
- Local storage: Saved readings are treated as expired after 30 days; checkout recovery state expires after 1 hour. Other preferences and activity history persist until cleared.
7. Your Rights
You can:
- Request deletion of your email from our records
- Clear your localStorage by clearing your browser data
- Decline optional analytics when asked, and change your choice at any time with Cookie settings in the footer or in section 3. Turning analytics off stops PostHog and clears its cookies and local storage on this browser. Events already sent are not deleted by this switch; email us to ask for deletion.
- Request a copy of any personal data we hold about you
To exercise any of these rights, email hello@gmancreations.com. We will respond within 30 days.
8. Children's Privacy
This service is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us personal information, contact us and we will delete it.
9. International Users
This service is hosted in the United States via Vercel's global CDN. If you access it from outside the US, your data may be processed in the US. By using the service, you consent to this transfer. We do not currently appoint an EU representative, but we aim to handle all data responsibly regardless of where you are located.
10. Changes to This Policy
We may update this policy at any time. The "last updated" date at the top will reflect the latest revision. If we make significant changes, we will note it on the site. Continued use after updates means you accept the revised policy.
11. Contact
Privacy questions? Email us at hello@gmancreations.com.