Privacy

01 Who is responsible

The data controller is Wuhan Amos Intelligent Technology Co., Ltd. (trading as The Slow Cup), Room 2003, 20th Floor, Unit 1, Building 9, Phase II, Plot P(2014)57, No.266 Gaoxin Second Road, East Lake High-tech Development Zone, Wuhan 430075, Hubei, China. Anything to do with your data — a question, a request, a complaint — goes to support@amosipm.com and is answered by a person.

02 What is stored

Email address

So the letters can be sent, and so we can find you if you reply.

Time zone

The UTC offset your browser reports, and its time zone name if it gives one. Used only to time the 06:30 delivery.

Course position

Which day is next, when it is due, and whether the last attempt succeeded. Without this, the queue could not resume.

Order record

Paddle's order reference, the amount, the currency, and the date. Kept so a refund can be checked against a real purchase.

Unsubscribe token

A random string that makes the one-click unsubscribe link work without a login.

Your IP address is used to rate-limit the sign-up form so it cannot be used to send bulk mail to strangers. It is held in memory for a few minutes and is never written to the database.

03 What is not stored

• No payment details. Card numbers never touch this site — Paddle handles the entire transaction.
• No cookies. This site sets none, and there is no cookie banner because there is nothing to consent to.
• No analytics, no tracking pixels, no advertising identifiers, no session recording.
• No profile. We do not infer anything about you, and there is no marketing list separate from the course itself.

04 Why it is held, and on what basis

Under the GDPR and similar laws, processing needs a lawful basis. There are two here:

• To perform the contract. Sending the letters you asked for, at the hour you asked for them, and honouring a refund if you want one. This covers the email address, the time zone, the course position and the order record.
• Legitimate interest. Keeping the service working and un-abused: rate-limiting the form, logging delivery failures, and retaining an unsubscribe record so someone who opted out is never added back.

Nothing is processed for profiling or automated decision-making, and nothing is sold or rented to anyone, ever.

05 Who else sees it

Three processors, each doing one narrow job:

Paddle

Payments, receipts, tax and refunds. Receives your email address and the transaction details. Paddle is the Merchant of Record and is separately responsible for the payment data it collects.

Alibaba Cloud

Outbound email. Receives your address and the letter being sent, and nothing else.

Google Fonts

Serves the two typefaces. Receives your IP address and browser version when a page loads. No cookie is set.

The letters themselves are drafted with the help of a language model. Prompts contain the course topic only — no email address, no name, and nothing about you is ever sent to a model provider.

06 Where it goes

These processors operate in the United Kingdom, the European Union, the United States and mainland China. Where data leaves the UK or EEA, it travels under the transfer mechanism that processor has published — Standard Contractual Clauses, or an adequacy decision where one exists.

If you would rather your address were not held outside your own region, write to us. For a service that is one email a day, we can usually find a way to accommodate it.

07 How long it is kept

While you are on the course, and for as long as the letters are useful to you afterwards.

If you unsubscribe, sending stops immediately. The record is kept in a minimal form — address and an "opted out" marker — because deleting it entirely would mean a later sign-up could quietly put you back on the list. You can ask for that record to be deleted as well, and it will be.

Order records are kept for as long as tax and accounting rules require, which is typically six to ten years depending on jurisdiction. Those records live with Paddle as well as here.

08 Your rights

Wherever you live, and regardless of whether your local law uses these names, you can ask us to:

• Show you everything held about you, in a readable form.
• Correct anything wrong — a mistyped address, a wrong time zone.
• Delete it. One email, and it is gone, except for the order record that tax law requires.
• Export it in a portable format.
• Stop any particular use, or object to it.

Requests are answered within thirty days, usually the same week, and there is no charge. We will not ask you to justify the request.

If you are unhappy with how a request was handled you can complain to your national data protection authority. We would rather you told us first, but it is your right either way.

09 Children

This site is written for adults and is not directed at anyone under sixteen. We do not knowingly collect data from children. If a child has signed up, write to us and the record will be removed.

10 Security, and being honest about it

The site is served over HTTPS. The database sits on a single server, is not publicly reachable, and holds no payment details and no passwords — because there are no accounts and no passwords to hold.

If a breach ever affected your data, you would be told directly and without spin, within seventy-two hours of us becoming aware of it.

11 Changes

If this policy changes in a way that affects what is stored or who sees it, the date at the top changes and anyone on the course is told by email before it takes effect.