PennedCanon Explore Privacy Notice
Version: explore-privacy-20261018-v2. Effective when public PennedCanon Explore signup opens; not before that opening.
Scope and contact
The Sage Dad LLC operates PennedCanon Explore. Contact [email protected] to ask about privacy, access, correction, account closure or a copy of retained information. This notice covers Explore accounts and sample review activity. The separate beta-interest notice covers waiting-list requests and related messages; existing beta agreements are not replaced by this notice.
Explore is intended for United States residents who are at least 18 and have reached the age of legal majority where they live. It is not intended for children. Contact us if you believe a child has supplied personal information through Explore.
Information and purposes
Clerk handles authentication, email verification, provider identity and session/security information. If you choose Google, Google supplies basic identity information such as your name, email address and profile picture to Clerk. This integration does not request your Gmail messages, Drive documents or contacts.
PennedCanon stores its account identifier, the Clerk issuer and user reference, session references, agreement acceptance records, access and security events, saved sample work, notes, source/version history and feedback you submit. Provider authentication and PennedCanon account access are separate: a matching email never automatically merges workspaces.
We use this information to provide access, save and recover work, preserve its history, administer agreements, protect the service and respond to support. Explore does not accept personal manuscript uploads at launch. Do not include passwords, verification codes or unnecessary sensitive information in support requests.
We do not sell Explore personal information, use Google identity information for advertising, or use your saved Explore content to train AI models. No paid AI request or paid checkout is enabled in this Explore launch.
Service providers and storage
IONOS hosts the public support mailbox and processes support correspondence. Clerk provides authentication and verification email delivery. Google provides the Google sign-in option. Cloudflare delivers and protects requests. Application records are held on the operator-managed server; encrypted recovery copies are collected on the operator's Mac through the existing backup system, which also uses Apple iCloud for cloud recovery copies. Time Machine is also configured to include the inspected local recovery, iCloud archive and PennedCanon working folders. These inclusion settings do not establish which historical files were successfully captured. A local collection receipt alone does not establish completion of cloud synchronization.
Providers may process information in the United States and other countries where they or their service providers operate. We do not promise that all information stays in a single country. Access is limited to service operation, support, security, recovery and lawful requirements. We may disclose information when legally required or necessary to protect people and the service. Legacy beta invitation emails use a separate service, Resend; they are not Clerk verification emails.
Cookies and optional analytics
Authentication uses essential cookies or similar session storage. The public homepage separately offers optional PostHog analytics under its privacy notice and preference controls. Optional analytics are not required to sign in. The inspected PostHog project has session replay disabled and no current event-retention window configured; we do not promise automatic deletion of analytics events after a fixed period. Its provider-level IP-discard option is off. This does not establish that every event contains an IP address, but we do not claim that all analytics records are anonymous or that IP addresses are universally discarded. No new workspace analytics or session replay is part of this Explore launch. Network and authentication providers can process connection/security information; statements about limited application activity records do not mean that every provider keeps no network logs.
Retention and requests
Account records, saved work and source history do not expire merely because you stop signing in. We retain them to provide the account and its recorded work. Contact us to request closure or deletion. We verify requests to protect account ownership and explain any information retained for security, legal obligations, agreement records or recovery. Disconnecting Google, deleting a Clerk identity or withdrawing a waiting-list request does not by itself delete the PennedCanon workspace.
Recovery copies are rotated separately from active records. The server rotation keeps the newest snapshot from each of seven recent backup dates and preserves snapshots not yet collected. This is not a seven-day erasure promise. The Mac/cloud archive selection also preserves representatives of four recent weeks and six recent months, with pending or uncertain uploads protected. These counts do not guarantee deletion within six calendar months. iCloud Drive can retain deleted files for recovery for 30 days after file deletion. Provider records have separate retention; deleting an active record does not immediately erase every backup. Time Machine copies have a separate lifecycle; their historical coverage and expiry have not been established. Excluding a folder from future backups would not erase existing copies. Backups are used for recovery rather than routine account access.
IONOS hosts support correspondence. Its inspected spam-protection setting automatically deletes spam after one month. No incoming-mail rules are defined, and the permanent-delete option is off. These settings do not establish automatic expiry for ordinary support correspondence or Trash. We have not established whether a separate mail archive or desktop copy adds further retention. Account closure therefore does not by itself establish deletion of support messages; include correspondence in your request if you want it considered.
Authentication and network-service records have separate lifecycles. Clerk dashboard log availability and Cloudflare analytics query windows do not establish when every underlying security record or provider recovery copy is erased. We do not promise a single fixed deletion period for these records.
We do not state a universal automatic deletion deadline. Contact us for the handling and retained-copy details applicable to your request. Your applicable legal rights remain in force, including any mandatory response periods. We will consider requests for access, correction, copies and deletion, and explain limits or required retention. We do not ask you to send passwords or verification codes to exercise these choices.
Changes
We will identify the effective notice and communicate material changes through the service or account email. New paid services or materially different processing require their own accurate disclosures before launch.