Effective date:
Who we are and how to contact us
The Empathy Group LLC, New York, NY, operates this website and is responsible for the personal information described in this policy. For questions about this policy or to make a privacy request, email support@theempatheticleader.com.
Information we collect and how we use it
When you submit an inquiry, we ask for your name, work email, company, role or title, inquiry category, a high-level description of your request, an optional timeframe and an acknowledgement that we will use the information to review and respond. We also process information you provide in follow-up correspondence or a privacy request.
We use this information to review and respond to inquiries, discuss potential engagements, handle privacy requests, meet applicable legal obligations and protect our services from abuse. Submission does not subscribe you to marketing emails. The response acknowledgement is not marketing consent.
Our hosting and email providers also process technical information, such as IP addresses, browser and request metadata, email-delivery information and security records, to deliver and protect their services. Temporary IP-based request counts are used to limit abuse. Application logs do not include inquiry bodies or contact fields; provider and infrastructure records are subject to their own practices.
Please provide only high-level, non-confidential information. Do not submit confidential employee, customer or patient information, sensitive personal data or proprietary organizational records.
Service providers and information sharing
The following providers handle information in connection with this website and its inquiries:
- Replit: Hosts the website and inquiry service and processes information needed to serve, secure and monitor them. Replit Analytics is enabled to help us understand website traffic and usage. Replit also monitors availability and sends uptime email notifications to the site operator.
- Resend: Processes inquiry notification content and email metadata to deliver inquiries to our business mailbox. Open and click tracking are disabled for this sending domain. See Resend’s data-handling disclosures and subprocessor list.
- TypeSafe AI security processing: Resend may use TypeSafe AI to scan a sample of outgoing emails for spam, phishing and email-security threats. Resend states that TypeSafe does not retain that content or use it to train models; these are the provider’s statements, not our independent guarantee. This security processing is distinct from using AI to assess prospects or generate responses.
- Neo: Provides the email infrastructure for our support mailbox, where delivered inquiries and correspondence are stored.
- Google Fonts: Supplies website fonts and receives visitor request metadata when those fonts load. Inquiry content is not sent to Google Fonts.
Inquiries are not stored in an application inquiry database or submitted to Revenue OS, a CRM, marketing systems or application-level AI. We do not use inquiry content for AI prospect evaluation, application-AI responses or model training. The separate email-security processing described above may still occur.
Advertising-related data practices
The website application does not sell personal information for advertising purposes or share it for cross-context behavioral advertising. We have not configured advertising pixels or advertising-data integrations. This statement describes our website application; it is not a guarantee about independent hosting-provider processing, whose limitations are described below.
Processing locations
Providers and their subprocessors may process information outside your country, including in the United States. Resend’s sending service for this website is configured in the US East region. The specific hosting and mailbox storage regions have not been confirmed. We do not promise that all information remains in a particular country or that all providers follow the same retention rules.
Legal bases where applicable
The legal basis for processing depends on the law that applies and the circumstances of your request. Where applicable, this may include legitimate interests in responding to business inquiries and protecting the service, steps you request before entering a contract where that basis applies to you, or compliance with legal obligations. Acknowledging this policy is not blanket consent to unrelated processing. You can contact us with questions about the basis relevant to your information.
Cookies and similar technologies
Our hosting infrastructure may set a GAESA routing cookie, with an observed expiry of approximately 30 days. Replit describes this as a Google serving-infrastructure routing identifier. Google Fonts also receives request metadata as described above.
Replit Analytics is enabled. It processes traffic and usage information, including IP-based network data, pages visited, referral sources, approximate country, browser and device information, to help us understand how the website is used. Our application does not send inquiry names, email addresses, company details or inquiry text to analytics.
Analytics and uptime notifications are used for website measurement and operation, not advertising, marketing automation or prospect evaluation. We do not configure advertising pixels or marketing cookies. Browser settings may let you block or remove cookies, which can affect website functionality. The absence of advertising cookies does not mean that no visitor information is processed.
Security
The website uses HTTPS and server-side validation and abuse protections. No transmission or storage method is completely secure. We do not promise end-to-end encryption, enforced encryption for every email-delivery hop or guaranteed security.
Retention and deletion
For inquiries that do not become client engagements, our policy is a 12-month retention target measured from the last substantive interaction, with monthly review and documented deletion.
A substantive interaction is a meaningful exchange about the inquiry, not an automated receipt or marketing message. A legal obligation, dispute, legal hold or other applicable lawful exception may justify longer retention, with the reason and review date documented. Converted engagements follow the retention terms applicable to their contracts and legal obligations.
Deletion is manual, not automatic on the 12-month anniversary. We retain minimal records of deletion actions and lawful exceptions rather than another copy of the inquiry body. Provider logs and backups follow separate schedules and limitations; we cannot promise that all copies disappear at the same time or that provider backups can be erased immediately. If correspondence is restored, recorded deletions are reapplied without restarting the retention period.
- Replit: Publishes a 30-day retention period for deployment logs; this does not establish a retention limit for every infrastructure or backup record.
- Resend: Publishes 30-day email/log retention and 7-day backup retention for Free, Pro and Scale plans; Enterprise terms can differ. The account-specific plan has not been confirmed, so these periods are not a guarantee for every record. Early deletion of sent email requires a provider request.
- Neo: Publishes automatic deletion from Trash/Spam after 30 days and provides manual permanent deletion. Its optional Email Backup feature may restore deleted messages. Whether it is enabled for our mailbox, and the applicable backup expiry or purge limits, have not been confirmed.
Your privacy rights and requests
Depending on applicable law and your circumstances, you may have rights to access, correct, obtain a copy of or delete your personal information; restrict or object to processing; withdraw consent where processing relies on consent; or complain to an appropriate privacy regulator. These rights may be subject to legal exceptions.
Email support@theempatheticleader.com to make a request. Identify the relevant correspondence and the right you wish to exercise without including sensitive records. We may ask for proportionate information to verify your identity and clarify the request. We will consider requests under applicable law, including applicable response periods and exceptions, and explain any relevant retention or provider limitation.