Privacy Policy

1. Scope

This Privacy Policy covers JVandall.com and the Think with John AI experience, referred to here as John AI. It explains the information involved when you visit the site, use John AI, follow an external link, or contact John Vandall by email.

2. Information Visitors Choose to Provide

You may choose to provide a prompt or question to John AI, including information you voluntarily place in that prompt. You may also send information directly if you contact John Vandall by email.

Please do not enter confidential employer or client information, trade secrets, privileged information, passwords, financial account information, health information, Social Security numbers, sensitive personal information, or information about other people that you are not authorized to disclose. Anonymize details wherever possible.

3. Think with John AI Data Flow

When you submit a message, it travels from your browser to JVandall.com's API. JVandall.com sends your current prompt, prior messages in the current topic, John AI's instructions, and relevant context to OpenAI. That context may include compact experience guidance and, depending on the question, no more than one sanitized, approved case summary. OpenAI generates a response, which is streamed back to your browser.

No account or login is required. To provide an anonymous seven-day Think with John session, the site uses a signed, HttpOnly first-party cookie. The cookie contains a session version, a randomly generated session identifier, session start, expiration, and last-activity times, the number of questions used, and limited request identifiers or a one-way request hash when needed to manage an interrupted request or retry. It does not contain prompt or response text.

Conversation content is retained in your browser only for the active browser session so follow-up questions, refresh, retry, New Topic, and Copy Session can work. Once that browser session ends, JVandall.com does not restore the conversation. Starting a New Topic clears the active conversation but does not reset the signed question allowance. JVandall.com processes messages transiently on its server to call OpenAI and stream the response, but does not retain a server-side transcript database.

4. OpenAI

OpenAI processes the current prompt, prior messages in the current topic, John AI instructions, and relevant context to provide the AI response. Think with John requests that Responses API outputs not be stored for later retrieval. OpenAI states that data sent through its API is not used to train or improve its models unless the API customer explicitly opts in to share that data.

OpenAI also states that, under its default API data controls, abuse-monitoring logs may include prompts and responses and are generally retained for up to 30 days. Different handling may apply when approved account-level data controls are enabled or when longer retention is required for legal or safety reasons. OpenAI API data handling remains subject to OpenAI's current API data controls, terms, policies, security requirements, and operational practices.

5. Hosting and Technical Information

JVandall.com is hosted using Vercel. Normal web infrastructure may process IP addresses, browser or device information, request metadata, timestamps, and security or performance information. JVandall.com's application code does not currently create visitor profiles from this information or intentionally send this visitor metadata to OpenAI. The application logs the active Think with John runtime and may record limited technical diagnostics, but it does not intentionally log the full user prompt or full AI response.

6. Analytics, Advertising, and Cookies

JVandall.com currently does not use visitor analytics or advertising pixels identified in the current implementation. Think with John uses one signed, HttpOnly first-party cookie for up to seven days solely to maintain anonymous session identity and manage the 10-question allowance, session timing, and retries. The cookie does not contain conversation text. The current conversation is kept in browser session storage and is not restored after the browser session ends. One other temporary browser-session value supports scroll navigation on the Stories page. These mechanisms are not used for advertising or cross-site tracking.

Third-party infrastructure may use cookies or similar mechanisms under its own practices and outside the application's control.

7. Contact by Email

The site does not operate a contact form. Selecting john@jvandall.com opens your email client. Email communications are handled through your and John Vandall's applicable email providers and may be retained as ordinary correspondence.

8. How Information May Be Used

Information may be used to operate John AI, respond to direct communications, prevent security threats or abuse, troubleshoot and maintain the site, improve the site, comply with legal obligations, and protect rights and safety.

9. Third-Party Services

The site relies on OpenAI for AI responses and Vercel for hosting. It also includes external links, such as LinkedIn, and uses the visitor's and John Vandall's email providers when email is used. These third parties operate under their own applicable terms and privacy practices.

10. Retention

The anonymous Think with John session cookie expires seven days after the session begins. It may remain after the active browser conversation has ended so the site can preserve the anonymous 10-question allowance and its timing. Returning later can therefore show the correct remaining allowance while starting with a fresh conversation. Starting a New Topic also clears the active conversation without changing that allowance.

JVandall.com does not retain a server-side transcript, keep a transcript library of visitor conversations, use visitor chats to train Think with John, or intentionally preserve chats for John's review. Conversation content is not restored after the browser session ends. Direct emails may be retained as ordinary business correspondence. OpenAI, Vercel, and other service providers may retain information under their own applicable practices.

11. Security

J. Vandall Consulting LLC uses reasonable measures appropriate to the site to protect information. No website, transmission method, or storage system can be guaranteed to be completely secure.

12. Privacy Rights

Depending on where you live and applicable law, you may have rights regarding personal information about you, including rights to access, correct, delete, or obtain a portable copy of information, or to object or opt out where legally applicable. To make a request, email john@jvandall.com. J. Vandall Consulting LLC may need to verify your request and may retain information when permitted or required by law.

13. Children

The site is intended for an adult and professional audience and is not directed to children under 13. Visitors should not knowingly submit personal information concerning children.

14. External Links

JVandall.com may link to websites and services that J. Vandall Consulting LLC does not control. This Privacy Policy does not govern those third parties, and visitors should review their privacy practices.

15. Changes to This Policy

This Privacy Policy may be updated as the site, its services, or applicable requirements change. The revised policy will be posted here with an updated effective date.

16. Contact