Privacy Policy

Effective August 15, 2026 · Vondant, LLC

1. Who we are

Vondant, LLC (“Vondant,” “we,” “us,” or “our”) is a Utah limited liability company that provides executive advisory and fractional architecture services, including the SOMAS Architectural Diagnostic Audit and the Agentic AI Enablement Masterclass offered on vondant.com (the “Site”).

This Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It is written for a privacy-respecting practice: we collect only what we need to respond to an inquiry or deliver an engagement, we do not sell personal information, and we do not run advertising or analytics trackers on the Site.

Questions or requests: info@vondant.com.

2. Scope

This Policy covers personal information processed through the Site, related emails we send, and the service providers named below. It does not cover Cal.com, Stripe Checkout, or other third-party sites you leave us to use — those services have their own policies.

The Site is intended for business contacts acting in a commercial capacity, not for consumers shopping for personal or household purposes, and not for children.

3. Information we collect

We collect the following categories, only when you provide them or when they are generated by operating the Site:

  • Identity and contact. Full name, work email address, and company name, from the SOMAS intake and the Masterclass checkout form.
  • Diagnostic content. Your SOMAS answers (team size, primary bottleneck, AI maturity) and the free-text description of your current architectural or delivery challenge. Treat that narrative as confidential business information. Do not include passwords, secrets, personal data of employees, or special-category data (health, union membership, and the like). We do not need it, and you should not send it.
  • Payment records. If you purchase the Masterclass, Stripe processes the payment. We receive confirmation that payment succeeded, a Stripe session or customer identifier, and limited billing metadata. We do not receive or store full card numbers, CVCs, or bank account numbers.
  • Scheduling data. If you book a call through Cal.com, Cal.com collects the booking details you give it. We receive what is needed to attend and follow up on that meeting.
  • Security and technical data. Our hosting and bot-protection providers process IP address, user-agent, timestamps, and similar connection metadata. Cloudflare Turnstile generates a verification token so we can tell a person from an automated script. We do not use this data to profile you for marketing.
  • Correspondence. Emails you send to info@vondant.com, and the transactional and inquiry-related messages we send you.

We do not collect Social Security numbers, government ID numbers, precise geolocation, or biometric identifiers. We do not knowingly collect information from children.

4. How we use information

We use personal information to:

  • receive, review, and respond to a SOMAS intake, including sending the preliminary diagnostic framework to the work email you provide;
  • create a Stripe Checkout session, confirm payment, and send Masterclass onboarding and scheduling information;
  • schedule and hold the review call or workshop;
  • follow up about the specific inquiry or engagement you submitted — not to enroll you in a newsletter or unrelated marketing list;
  • protect the Site (bot prevention, fraud, abuse, and security);
  • keep records required for tax, accounting, and legal compliance; and
  • establish, exercise, or defend legal claims.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not buy marketing lists. We do not use your diagnostic narrative, emails, or other content to train machine-learning models, and we do not feed that content into public generative-AI tools. We do not use intake material in case studies, testimonials, or marketing without your prior written consent.

5. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information only where a legal basis allows it:

  • Contract. To take steps at your request before a contract (a SOMAS intake or Masterclass booking) and to perform that contract.
  • Legitimate interests. To secure the Site, prevent bots and fraud, keep basic operational records, and send follow-up that is reasonably related to the inquiry you submitted, in ways you would expect and that do not override your interests.
  • Legal obligation. To keep tax and accounting records, and to respond to lawful requests.
  • Consent. Only where we ask for it. You may withdraw consent without affecting processing that already occurred.

We do not use automated decision-making that produces legal or similarly significant effects about you.

6. How we share information

We share personal information with service providers who process it on our instructions, only as needed to operate the Site and deliver the engagement:

  • Cloudflare. Hosting the Site (Cloudflare Pages) and Turnstile bot protection.
  • Amazon Web Services. Application programming interfaces, storage, and transactional email for intakes and confirmations.
  • Stripe. Payment processing for the Masterclass. Card data is handled by Stripe under Stripe’s terms and privacy policy; see stripe.com/privacy.
  • Cal.com. Scheduling when you choose to book a call. Cal.com’s terms and privacy policy apply to that booking flow.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality. We do not disclose personal information to advertisers or data brokers.

7. Cookies and similar technologies

The Site does not include analytics scripts, advertising pixels, or social-media trackers. We do not set first-party analytics cookies, and we do not run a cookie-consent banner because we do not use non-essential tracking cookies.

Cloudflare and Turnstile may set strictly necessary cookies or similar identifiers to operate hosting, security, and bot protection. Stripe and Cal.com may set their own cookies when you use their pages. Those parties are responsible for their technologies.

8. Retention

We keep personal information only as long as needed for the purposes above:

  • SOMAS intakes and related correspondence: for the life of the inquiry and a reasonable period afterward so we can resume the conversation if you return, then we delete or irreversibly de-identify them unless a longer period is required;
  • Masterclass payment and engagement records: for the engagement and thereafter as required for tax, accounting, and dispute purposes (generally up to seven years in the United States);
  • security logs: for a short operational period unless needed to investigate an incident.

You may ask us to delete your information sooner. We will do so unless we must keep a record (for example, a paid invoice, a legal hold, or fraud prevention).

9. Security

We use reasonable administrative, technical, and organizational measures appropriate to a small professional practice: encrypted transport (HTTPS), access limited to people who need it, bot protection on public forms, and payment card data kept out of our systems by using Stripe Checkout. No method of transmission or storage is perfectly secure. If a breach of personal information as defined under applicable law occurs — including Utah’s Protection of Personal Information Act, Utah Code §§ 13-44-101 and following, where it applies — we will notify affected persons and regulators as those laws require.

10. Your choices and rights

You may decline to submit a form; the Site will still display. If you do submit, you may:

  • request access to the personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion, subject to the retention limits in Section 8;
  • ask us to restrict or object to certain processing, including inquiry-related follow-up; and
  • if you are in the EEA, UK, or Switzerland, request portability of information you provided to us, and lodge a complaint with your local supervisory authority.

Email info@vondant.com from the address we have on file, or otherwise help us verify that we are talking to the right person. We will not discriminate against you for exercising these rights.

Utah’s Consumer Privacy Act and similar U.S. state consumer laws generally do not treat business-to-business contacts as “consumers,” and many of those statutes also have revenue or volume thresholds we do not meet. We still honor the requests above as a matter of practice.

11. International transfers

Vondant is established in the United States. If you contact us from outside the United States, your information will be processed in the United States and in any other country where our providers operate. U.S. law may not provide the same protections as the law of your country.

Where a data-protection law requires a transfer mechanism, we rely on the mechanisms our providers offer (for example, Standard Contractual Clauses used by Cloudflare, Amazon Web Services, Stripe, or Cal.com) together with the contractual necessity of performing the engagement you requested.

12. Children

The Site is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe we have, write to info@vondant.com and we will delete it.

13. Changes

We may update this Policy from time to time. The effective date at the top will change. Material changes will be posted on this page. For an engagement already paid for, the Policy in effect when you paid continues to govern that engagement unless we are required by law to apply a newer version, or you agree otherwise.

14. Contact

Vondant, LLC
Email: info@vondant.com

See also our Terms of Service.