← Home
Legal

Privacy Policy

Last updated: 2 July 2026

This Privacy Policy describes how Protocol AI LLC, doing business as YourProtocol ("YourProtocol," "we," "us," or "our"), collects, uses, discloses, and safeguards personal information when you visit or interact with our website located at yourprotocol.ai (the "Site"). By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

YourProtocol is an online educational library, operated by Protocol AI LLC, that summarises publicly available health and wellness protocols published by third-party experts. For the purposes of applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and the UK GDPR, Protocol AI LLC is the data controller of the personal information described in this Policy.

Controller contact: Protocol AI LLC, a Wyoming limited liability company, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States. Data protection enquiries may be submitted through the contact facility on the Site or to legal@yourprotocol.ai.

2. Information We Collect

We collect a limited amount of personal information, as follows:

(a) Information you provide directly. If you submit our early-access form, we collect the email address you provide together with a record of the protocol or page from which the submission was made. We do not request, and do not intentionally collect, any other personal information through the form.

(b) Information collected automatically. When you visit the Site, we and our analytics provider collect certain usage information automatically through cookies and similar technologies, including the pages and protocols viewed, approximate geographic region (derived from a truncated IP address), device type, browser type, operating system, referral source, and interaction events. This information is collected and processed on an aggregated basis as described in Section 6 below.

(c) Information we do not collect. YourProtocol is an educational library. We do not request, collect, or process health information, medical records, or any other special categories of personal data concerning you. Nothing on the Site requires you to disclose information about your health, and you should not submit such information to us.

3. How We Use Personal Information

We use the personal information we collect for the following purposes:

  • To provide you with early-access information and to administer your place on our access list;
  • To send you occasional updates regarding YourProtocol, from which you may unsubscribe at any time;
  • To understand, in aggregate, how the Site is used and to improve its content, structure, and performance;
  • To maintain the security and integrity of the Site;
  • To comply with applicable legal obligations and to establish, exercise, or defend legal claims.

We do not use personal information to build individual profiles, and we do not make decisions producing legal or similarly significant effects based on automated processing.

4. Legal Bases for Processing (EEA and UK Visitors)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Consent (Article 6(1)(a)): for the setting of analytics cookies and for sending you updates about YourProtocol. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Legitimate interests (Article 6(1)(f)): for maintaining the security of the Site, responding to enquiries, and administering our early-access programme, in each case where such interests are not overridden by your rights and freedoms.
  • Legal obligation (Article 6(1)(c)): where processing is necessary to comply with a legal obligation to which we are subject.

5. How Information Is Stored and Shared

Form submissions are processed and stored on our behalf by our hosting provider, Netlify, Inc. ("Netlify Forms"), acting as a service provider and processor, so that we can contact you. Usage data is processed on our behalf by Google LLC through Google Analytics 4, as described in Section 6.

We share personal information only with:

  • Service providers and processors that host the Site, store form submissions, or provide analytics services, in each case under contractual terms restricting their use of the information to the services they provide to us;
  • Professional advisers, regulators, courts, or law enforcement, where disclosure is required by applicable law, regulation, legal process, or enforceable governmental request, or is necessary to establish, exercise, or defend legal claims;
  • A successor entity in connection with a merger, acquisition, reorganisation, or sale of assets, in which case the successor will be bound by this Policy or one materially similar.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

6. Cookies and Analytics

We use Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC, to understand how the Site is used, including which protocols are viewed, the approximate region from which visits originate, and the devices and browsers used. GA4 sets cookies and processes usage data on our behalf. We review this data in aggregate only; we do not use it to identify you personally and we do not sell it.

You may opt out of analytics measurement at any time by:

  • Blocking or deleting cookies through your browser settings;
  • Installing Google's official opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout; or
  • Using a browser or browser extension that blocks analytics scripts.

Consent for EEA and UK visitors. For visitors located in jurisdictions that require prior consent for the setting of non-essential cookies, including the European Economic Area and the United Kingdom, analytics cookies will be set only in accordance with the consent mechanism presented on the Site. Where no consent mechanism is presented, you may rely on the opt-out methods described above.

7. International Transfers

We are based in the United States, and personal information collected through the Site is processed in the United States and in other jurisdictions where our service providers operate. Where personal information originating in the EEA, the United Kingdom, or Switzerland is transferred to a jurisdiction that has not been recognised as providing an adequate level of data protection, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as implemented in our agreements with the relevant service providers.

8. Data Retention

We retain early-access form submissions for as long as reasonably necessary to administer the early-access programme and to communicate with you, and thereafter for such period as may be required to comply with legal obligations or to establish, exercise, or defend legal claims. Aggregated analytics data is retained in accordance with the retention settings we have configured in GA4. If you ask us to delete your details, we will delete them within a reasonable period, subject to any legal retention requirements.

9. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights in relation to your personal information:

  • The right to access the personal information we hold about you;
  • The right to rectification of inaccurate or incomplete information;
  • The right to erasure of your personal information;
  • The right to restrict or object to processing;
  • The right to data portability;
  • The right to withdraw consent at any time, where processing is based on consent;
  • The right to lodge a complaint with a supervisory authority, including, for EEA residents, your local data protection authority, and for UK residents, the Information Commissioner's Office.

California residents. If you are a California resident, you have the right to know the categories of personal information we collect and the purposes for which it is used, the right to request deletion or correction of your personal information, and the right not to receive discriminatory treatment for exercising your rights. As stated above, we do not sell personal information or share it for cross-context behavioural advertising, and accordingly no opt-out of sale or sharing is required.

To exercise any of these rights, contact us through the Site or at the address in Section 1. We may take reasonable steps to verify your identity before responding to a request. We will respond within the timeframes required by applicable law.

10. Security

We implement reasonable technical and organisational measures, appropriate to the nature of the information we hold, designed to protect personal information against unauthorised access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Not Medical Data; Not Medical Advice

YourProtocol is an educational library. The content on the Site is not medical advice, and we do not collect health information about you. Please refer to our Terms of Use for further information regarding the nature of the content.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised. Material changes will be communicated by posting the revised Policy on the Site and, where required by law, by additional notice or by seeking renewed consent. Your continued use of the Site after the effective date of any revision constitutes your acknowledgement of the revised Policy.

14. Contact

To request access to, correction of, or deletion of your personal information, or to raise any question regarding this Privacy Policy, please contact us through the Site or at legal@yourprotocol.ai.