PRIVACY
NOTICE

WHAT WE COLLECT

When you join the Sal email list, we collect your email address, signup source and date, optional broad update interests, optional broad answer about how you found the shop, and limited campaign attribution. We also record welcome-email and campaign delivery status. If you contact us, we collect the name, email address, and message you provide. With analytics permission, we collect the limited visit and event data described below.

WHY WE COLLECT IT

We use email-list signups to send a welcome email from Sal and occasional updates about SÍ PUEDES, future books, release news, and related announcements. Broad preferences help us make those occasional notes more relevant. Contact-form messages are used only to reply and do not add you to the email list. We do not sell or rent your email address.

WHO PROCESSES DATA

Resend receives email addresses and email content to deliver list messages, a receipt to contact-form users, and a notification to the team that does not include the visitor’s contact details or message. DeepSeek receives the recent chat text needed to answer you; Talk to Sal does not send DeepSeek your signup email. Google Analytics receives consented page paths, approved interaction names, browser/device information, analytics identifiers, and approximate location derived by Google; we do not intentionally send email addresses or chat text. Amazon receives your request when you follow a book link and may collect its own device, account, order, and cookie data under its privacy terms. Replit hosts the application and PostgreSQL database and therefore processes the application data and technical logs needed to operate them.

These providers may process information in the United States or other countries where they operate. Their own retention, security, and legal obligations apply after data reaches them. Talk to Sal does not receive Amazon account or order details.

YOUR CHOICE

Every list email includes a signed unsubscribe link and a signed preferences link. The preferences link verifies control of the destination mailbox for 90 days and lets you download your email profile and associated delivery metadata or permanently delete it. You can also contact us from the address involved; we will reply to verify the request before providing access, correcting data, or deleting contact-inbox records. We aim to complete verified requests within 30 days. Unsubscribing does not affect your ability to visit the site.

THE CHAT

Recent chat text is sent to DeepSeek to produce a reply. Before chatting, you must separately agree that Talk to Sal may store the conversation text with your signup email for up to 90 days so the team can review conversations, understand common questions, and improve the experience. Consented transcripts include your messages, Sal’s replies, session timing, and safety flags. Separate operational metadata includes a random session ID, message role, turn count, response time, daily one-way IP hashes, and operational events. Operational metadata is deleted after 30 days. You may download or permanently delete your email-linked transcript data through your private email preferences link.

ANALYTICS

With your explicit permission, the site uses Google Analytics and a first-party pseudonymous summary to count deduplicated visits, approved button actions, page path, referrer hostname, broad campaign tags, and headline or CTA experiment results. A keyed one-way browser identifier supports daily deduplication. We also count book-link redirects by campaign in aggregate, without open pixels or recipient-level click histories. You can decline or change that choice using Privacy Choices. We do not intentionally send Google your email address, chat messages, full referrer URL, or free-form answers. Google may receive an IP address as part of the network request and handles it under its own terms.

RETENTION

Active email profiles are kept while you remain subscribed. At 30 days after unsubscribe, the identifiable profile is immediately excluded from every reader and administrator view; an automated cleanup replaces it with only a keyed one-way hash, suppression reason, and dates within six hours while the service is running. That minimal suppression record is kept while needed to honor the opt-out; it cannot be used to recover your address. Verified deletion does this immediately and also removes linked chat transcripts. Delivery-event and first-party analytics records are deleted after 13 months. Chat/session/rate-limit metadata is deleted after 30 days; consented email-linked transcript text is deleted after 90 days.

Contact messages are available in the protected Talk to Sal database for no more than 90 days. At expiry they are immediately excluded from every reader and administrator view, and an automated cleanup permanently removes the expired record within six hours while the service is running. The team notification does not contain the visitor’s name, address, or message. Resend receives the address and receipt text needed to send the private contact-data link. Provider logs and backups may disappear later under each provider’s schedule.

ACCESS, EXPORT, AND DELETION

Open the signed preferences link in any list email and use Your Data to download a JSON copy or delete your email profile, contact messages using the same address, and associated delivery metadata. Each contact submission also sends a 90-day private link to that address for downloading or immediately deleting that contact record. For a missing or expired link, correction, objection, or other request, contact us from the affected address. We verify control by replying to that address before acting.

Deletion cannot erase information held independently by Amazon, Google, or DeepSeek, aggregate statistics that no longer identify you, or temporary provider backups. We also keep the minimum suppression hash described above so a deleted or unsubscribed address is not accidentally mailed again.