Legal
Privacy
Policy
Effective August 3, 2026
This policy explains what gregmiller.ai collects, why it is collected, who it is shared with, and how to have it deleted. It is written to be read, not to be skimmed past.
Who is responsible
This site is operated by Greg Miller (“I”, “me”, “my”), based in Lucerne, Switzerland. I am the controller of the personal data described here. Questions, requests, and complaints go to greg@gregmiller.ai.
What I collect
Information you give me. When you submit the contact form, leave your email for research write-ups, or run one of the tools on this site, I collect what you type into it. Depending on the form, that can include your name, email address, your message, and any property address you enter into the property-check tool.
Information collected automatically. When you visit, standard analytics are recorded: pages viewed, referring page, approximate location derived from IP address, device and browser type, and how you moved through the site. This is used to understand what people read and what is broken.
Account information. A small number of pages are behind a login. If you create an account, authentication is handled by a third party and I hold only your account identifier and email.
I do not knowingly collect information from anyone under 16, and I do not collect special categories of data such as health, biometric, or financial account information.
Why I collect it
- ▪To answer you. If you send a note, I need your address to reply.
- ▪To send research write-ups, if you asked for them. No schedule is promised and there is no drip sequence.
- ▪To run the tools. The property-check tool needs an address to return a result, and an email to send you a result it could not compute on the spot.
- ▪To keep a record of who I have talked to, so I am not starting from zero the next time we speak.
- ▪To understand how the site is used and to keep it working.
Where the law requires a legal basis, I rely on your consent for research write-ups, on the steps taken at your request before entering into a contract when you contact me about work, and on legitimate interests for analytics and for keeping records of business relationships.
Who it goes to
I do not sell personal information, and I do not share it for cross-context behavioral advertising. Information is shared only with the service providers who make the site run, each of which processes it on my instructions:
- ▪Attio, the CRM where contact-form submissions, tool submissions, and email signups are stored.
- ▪PostHog, for site analytics.
- ▪Clerk, for authentication on the small number of logged-in pages.
- ▪Vercel, which hosts the site and processes request logs.
- ▪Calendly, if you book a call through the link in the header. What you give Calendly is governed by their policy.
- ▪Stripe, if a payment is ever taken through this site.
I will also disclose information if I am legally required to, or if it is necessary to protect my rights or someone's safety.
Where it is stored
These providers are largely based in the United States, so your information will be transferred there and stored on their systems. Where transfers out of the European Economic Area, the United Kingdom, or Switzerland require a safeguard, those transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism offered by the provider.
How long it is kept
Contact records are kept for as long as the relationship is useful to either of us, and I review them periodically. Analytics data is retained under the analytics provider's default retention. If you ask me to delete your information, I will delete it and keep only what I am required to keep.
Your rights
Depending on where you live, you may have the right to access the personal data I hold about you, correct it, delete it, restrict or object to how it is used, receive a copy in a portable format, and withdraw consent at any time. California residents additionally have the right to know what is collected and disclosed, the right to delete, the right to correct, and the right not to be discriminated against for exercising any of these.
To exercise any of them, email greg@gregmiller.ai. I will respond within 30 days. There is no charge and you do not need to explain why. If you think I have handled your data badly, you can complain to your local data protection authority, and in Switzerland to the Federal Data Protection and Information Commissioner.
Text messages
If you opt in to text messages at gregmiller.ai/sms-opt-in, I record your phone number, the date and time of the opt-in, the exact consent language you were shown, and the source and campaign that brought you to the page. That record is kept as proof of consent for as long as you are opted in and for a period afterward.
No mobile information is sold, rented, or shared with third parties for marketing or lead generation, and text message consent is never shared with anyone. The only companies that handle it are the messaging provider that delivers the texts and the CRM that stores the contact record, both acting solely on my instructions. Reply STOP to any message to opt out and HELP for help. Message frequency varies and msg & data rates may apply.
Cookies
This site uses cookies and similar local storage for two things: keeping you logged in if you have an account, and analytics. It does not run advertising cookies or third-party ad trackers. Your browser can block or clear cookies, and the site will still work, though logged-in pages will not.
Security
Data is transmitted over encrypted connections and held by providers who maintain their own security programs. No system is perfectly secure, and I will not claim otherwise. If a breach affects your information and the law requires notice, you will be notified.
Changes
If this policy changes, the effective date at the top changes with it. Material changes will be flagged on the site.