Privacy Policy

1. Introduction

This Privacy Policy explains how EF International Advisors, LLC ("Company," "we," "us") collects, uses, and protects information when you use the Built for War website and the Situation Room (the "Service"). By using the Service, you agree to this Policy.

2. Information we collect

Account information: your email address and authentication credentials, managed through our authentication provider (Supabase). If you sign in with Google, we receive your name, email address, and profile image from Google.

Content you provide: the situations, messages, and supporting materials (such as documents, emails, and notes) you submit to the Situation Room, and any other information you enter.

Usage information: records of your activity needed to operate the Service, including which plan you are on and metering of your AI usage against your plan limits.

Payment information: if you subscribe, your payment is processed by Stripe. We do not collect or store your full card number; Stripe handles payment data under its own terms. We receive limited billing details such as your subscription status and plan.

Technical information: standard server logs, your IP address, and cookies used for authentication and for bot protection (Cloudflare Turnstile).

3. How we use information

We use your information to: provide and operate the Service; generate AI responses to your situations; manage your account, subscription, and billing; enforce usage limits; secure the Service and prevent abuse; respond to your requests; and comply with legal obligations.

4. AI processing of your content

To generate responses in the Situation Room, the content you submit — including situation text and the supporting materials you provide — is transmitted to our AI provider (Anthropic) and processed to produce a response. This processing is necessary to deliver the Service you request. Anthropic processes API content under its own terms and, per its policy, does not use API inputs or outputs to train its models by default.

Please do not submit information you are not permitted to share. You are responsible for the content you provide.

5. Service providers and sub-processors

We rely on the following providers to operate the Service: Supabase (database, authentication, and storage), Anthropic (AI processing), Stripe (payments), Cloudflare (bot protection and content delivery), Render (application hosting), and Microsoft Clarity (website analytics and session replay). These providers process information on our behalf and are bound by their own terms and security commitments. We do not sell your personal information to unrelated third parties.

Separately, our own team uses social-media publishing and content tools — currently Zernio, Ayrshare, Postiz, and fal.ai — to schedule and produce our marketing content on our own social accounts. These tools are not part of the Situation Room and do not receive your account information, your situations, or any other personal information you provide through the Service.

We may also share personal information with companies that are affiliated with, or commonly owned by, EF International Advisors, LLC, for purposes consistent with this Policy (for example, shared business operations or administration). Any such affiliate would be bound by protections consistent with this Policy.

6. Cookies and analytics

We use cookies that are strictly necessary to keep you signed in and to operate the Service securely. These cannot be turned off.

We also use Microsoft Clarity to understand how the site is used. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. We also use this information for site optimization and for fraud and security purposes. For more information about how Microsoft collects and uses your data, see the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement.

More broadly, we may use cookies, analytics tools, and other third-party services that collect information about your interactions with our website. These third parties process information under their own privacy policies. Where required by applicable law, you may opt out of disclosures or uses of personal information for targeted advertising, cross-context behavioral advertising, or sale or sharing of personal information, by adjusting your choices on our Cookie Preferences page.

You can turn Microsoft Clarity analytics off at any time on our Cookie Preferences page.

7. Data retention

We retain your account and content for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated content, subject to any retention required by law or for legitimate business purposes such as billing records.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, row-level access controls so each account can only access its own data, and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. State-Specific Privacy Rights

Depending on your state of residence and subject to applicable law, you may have certain rights regarding the personal information we collect, use, disclose, sell, share, or otherwise process. Not every right below applies to every state, and not every state privacy law applies to us — many are limited by thresholds based on revenue, the number of consumers affected, or whether a business sells personal information or uses it for targeted advertising. As a matter of practice, we aim to honor the requests below for anyone who asks, regardless of whether your state's law independently requires it of us. Where a right applies to you, it may include the right to:

1. Confirm whether we process your personal information;
2. Access the personal information we maintain about you;
3. Correct inaccuracies in your personal information;
4. Request deletion of your personal information;
5. Obtain a copy of certain personal information in a portable format;
6. Opt out of the sale of personal information, the sharing of personal information for cross-context behavioral or targeted advertising, or certain profiling activities;
7. Limit the use or disclosure of sensitive personal information, where applicable;
8. Appeal a decision we make regarding a privacy rights request, where applicable; and
9. Be free from unlawful discrimination or retaliation for exercising your privacy rights.

To exercise these rights, contact us at support@efinternationaladvisors.com. We may need to verify your identity before processing your request. If you submit a request through an authorized agent, we may require proof that the agent is authorized to act on your behalf and may also require you to verify your identity directly with us.

If we deny your request, in whole or in part, you may have the right to appeal our decision by contacting us at support@efinternationaladvisors.com and stating that you are appealing a privacy rights decision.

We will respond to privacy rights requests within the time required by applicable law. Some rights may be limited by legal exceptions, including where we need to retain information to provide the Service, complete transactions, comply with legal obligations, prevent fraud, protect security, or exercise legal rights.

Where required by applicable law, we will also honor recognized browser-based or device-based opt-out preference signals, such as Global Privacy Control, for residents of states where such signals must be honored.

We do not sell personal information for money. To the extent any sharing of information described in this Policy (for example, with Microsoft Advertising, see Section 6) is considered a "sale" or "sharing" under applicable state law, you can opt out on our Cookie Preferences page or by contacting us at support@efinternationaladvisors.com.

10. International data transfers

Our providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.

11. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice where appropriate.

13. Contact

Questions or requests about your privacy? Contact us at support@efinternationaladvisors.com.