Pre-publication legal draft. This policy names Christopher Lee as the current individual operator of Not Busy. It must be reviewed by a qualified Hong Kong lawyer before public launch, collection of Check responses, or any paid offering. Update it when an operating entity is incorporated or actual vendors/retention settings change.
Privacy Policy
1. Scope
This Privacy Policy explains how Christopher Lee, operating Not Busy, collects, uses, discloses, retains, and protects personal data when you visit not-busy.com, use a Not Busy account, complete a Not Busy Check or save a Read, request a Field Kit resource, subscribe to Not Busy Notes, contact us, or use another Not Busy service.
This policy does not govern third-party services that you access directly, such as Instagram, TikTok, Google, Beehiiv, payment providers, or websites you choose to link.
2. Personal data we collect
We collect only the data reasonably needed for the service you choose to use.
Account and contact data
- name or display name, if provided;
- email address;
- account ID, sign-in method, and account-security information;
- communication preferences and consent records.
Not Busy Check and product data
- answers submitted in a Check;
- expectation, demand, capacity, and progress readings, selected non-negotiables, working-mode signals, saved Reads, decisions, playbooks, No Scripts, review choices, and feedback;
- optional contextual information you submit about your work, life, responsibilities, or constraints;
- optional LinkedIn or website URL and a minimized public-context summary, only if you explicitly ask us to use it for your Read;
- optional Instagram handle and explicit permission to contact you, if you choose to provide them.
Resource, communication, and transaction data
- Field Kit resources requested or delivered;
- messages, support requests, complaints, and feedback you send us;
- if paid offerings are launched: order, payment status, currency, refund, and customer-service records. Payment-card details are processed by the payment provider and are not stored by Not Busy.
Technical and usage data
- device, browser, IP address or approximate location derived from it, session/security data, referral source, campaign parameters, pages viewed, high-level product events, and error/performance logs.
Do not submit another person’s personal data, confidential business information, medical information, mental-health information, financial-account information, or other sensitive personal information unless we specifically ask for it and you have the right to provide it.
3. How we use personal data
We use personal data to:
- provide the website, resources, account access, Check experience, saved Reads, and requested support;
- authenticate accounts, prevent abuse, and protect the security and reliability of Not Busy;
- create and present your Read, including a current working mode, one decision, a practical playbook, and a No Script;
- use a public LinkedIn profile or website as context only where you expressly request that use;
- send transactional messages such as sign-in codes, requested resource delivery, result-access receipts, and opted-in review reminders;
- send Not Busy Notes or other marketing only where you separately opt in;
- understand aggregate use of the service, improve product reliability, and diagnose errors;
- comply with legal obligations, resolve disputes, and enforce our Terms.
Where applicable law requires a legal basis, processing may be necessary to provide a requested service, protect legitimate operational and security interests, comply with law, or rely on consent where consent is required.
4. AI-assisted Reads
The Not Busy Check may use AI to turn your submitted answers and permitted contextual information into a structured Read. AI is used to summarize your stated context and express a bounded result created from Not Busy’s rules and question framework; it is not used to make medical, mental-health, legal, financial, employment, or other regulated professional decisions about you.
Where enabled, we may use OpenRouter and an AI model provider selected through that service to process the minimum Check content needed to generate your Read. We will not send your Instagram handle, analytics identifiers, unrelated account data, or raw unminimized external webpages for this purpose.
Do not rely on a Read as professional advice. You remain responsible for your decisions and for seeking appropriate professional support where needed.
5. Newsletter and direct marketing
Creating a Not Busy account does not subscribe you to Not Busy Notes.
We use your email for Not Busy Notes or other direct marketing only if you make a clear, separate choice to opt in. You can unsubscribe using the link in the relevant email or by contacting us. Withdrawing marketing consent does not remove your account or access to non-marketing product features.
Permission to contact you on Instagram about a Read is separate from newsletter consent and may be withdrawn at any time.
6. How we share personal data
We share personal data only where reasonably needed to operate Not Busy, with service providers acting on our behalf or in connection with a service you request. Depending on the features enabled, this may include providers for hosting, database/storage, authentication, transactional email, newsletter delivery, messaging automation, analytics, error monitoring, AI processing, payment processing, security, and customer support.
Current or planned providers may include Vercel, Cloudflare, Supabase, Better Auth, Resend, Beehiiv, ManyChat, PostHog, Sentry, Google, OpenRouter, and payment providers selected for a future paid offering. We may also disclose personal data where required by law, to protect rights or safety, or in connection with a lawful sale, restructuring, or transfer of the Not Busy business or assets.
We do not sell personal data for another party’s direct marketing.
7. International processing
Our service providers may process data in Hong Kong and other locations. Where appropriate, we take reasonable steps to use suitable contractual, organizational, or technical safeguards for international processing.
8. Retention
We retain data only for as long as reasonably necessary for the purposes described in this policy.
- Unauthenticated Check drafts are designed to expire after a short, documented period and are not retained as a permanent profile.
- Account and saved Read data are retained while your account remains active, unless you request deletion or retention is needed for legal, security, fraud-prevention, or recordkeeping reasons.
- Marketing-consent and unsubscribe records may be retained as needed to honor your choices and demonstrate compliance.
- Transaction records, if paid offerings launch, may be retained as required for accounting, tax, dispute, and legal purposes.
We will publish or update more specific retention settings before launching features that collect ongoing Read history, payments, or paid memberships.
9. Cookies, analytics, and error monitoring
We use essential cookies or similar technologies for service operation, authentication, security, and preference storage. We may also use privacy-conscious analytics and error-monitoring tools to understand aggregate product performance and reliability.
We do not send raw Check answers, detailed Reads, email addresses, Instagram handles, or sensitive profile context to product analytics. Where consent is legally required for non-essential technologies, we will request it before enabling them.
10. Your choices and rights
You may have rights, depending on applicable law, to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal data, and to withdraw consent where processing depends on consent.
You can also:
- update or delete information from your account where that feature is available;
- unsubscribe from Notes without losing your Not Busy account;
- withdraw permission for Instagram contact;
- ask us to correct or delete Check data, subject to lawful exceptions.
To make a request, email privacy@not-busy.com. We may need to verify your identity before acting. We will respond within the timeframe required by applicable law.
11. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal data. These include access controls, least-privilege design, Row Level Security for private product records where applicable, and keeping secrets out of public code repositories.
No online service is completely secure. Please protect your account access and contact us promptly if you believe your account has been compromised.
12. Children
Not Busy is not directed to children under 16. Do not use the service if you are under 16 unless legally valid permission has been obtained where required. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy as Not Busy evolves, including when an entity is incorporated, a service provider changes, or a feature changes how personal data is processed. We will post the updated policy with a revised effective date and provide additional notice where appropriate.
14. Contact
For privacy questions, data requests, or concerns:
Christopher Lee, operating Not Busy
Before publishing, ensure this inbox is active, monitored, and controlled by Christopher Lee. This document is a business draft and requires Hong Kong legal review.