Thirty Straight

Privacy Policy

Current as of August 2026. We may update these terms; the latest version always lives on this page.

Thirty Straight is a small operation with no interest in your data beyond what it takes to run the service. This policy tells you exactly what we collect, what we do with it, and what we will never do with it. "We," "us," and "Thirty Straight" mean R.J. Duffy, an individual doing business as Thirty Straight, the operator of thirtystraight.com.

1. What this service is (and is not)

Thirty Straight is a 30-minute AI advice session: you type, an artificial intelligence answers, and a full session ends with a written plan. You are talking to software, not a person. Thirty Straight is not therapy, counseling, psychotherapy, or medical or mental-health care, and it is not a licensed therapist, counselor, or medical provider. That distinction matters for privacy, and Section 4 explains why in plain terms.

Thirty Straight is also not a crisis service — no human monitors sessions. If you are in crisis or thinking about harming yourself, call or text 988 (the Suicide & Crisis Lifeline — free, confidential, 24/7) or call 911.

2. What we collect — and what we deliberately don't

  • Your conversation: not stored by us. There are no accounts, and we do not store the content of your session on our servers. Your transcript is kept in your own browser (localStorage) so you can pick a session back up on the same device; clear your browser data and it's gone. Our servers keep only anonymous operational records per session: message counts, timestamps, and a payment reference for paid sessions — never what was said.
  • AI processing. To generate each reply, your session messages are sent to our AI provider, Anthropic, and processed by their Claude API. Anthropic does not use API conversations to train its models; it may retain API data for a limited period for abuse monitoring under its own privacy policy and usage terms, which we don't control.
  • Payment information. Payments run through Stripe. Your card number goes directly to Stripe and stays there — Thirty Straight never sees or stores full card numbers. Stripe shares with us only what we need: your name, email, and payment status, and it emails you a receipt.
  • Abuse limits. To keep the free preview free, we count preview messages per visitor using a one-way hash of your IP address that expires daily. We don't store readable IP addresses with sessions.
  • Analytics and ad measurement. We use Google's tag (gtag.js, tied to Google Ads) to understand how visitors reach the site and whether our ads work. It sets cookies and shares limited event data with Google, handled under Google's own terms and privacy policy. You can opt out of ad personalization at myadcenter.google.com. We don't sell your data or build advertising profiles of you ourselves.
  • Email. If you email hello@thirtystraight.com, we have whatever you send us.

3. How we use it

We use information to run the service and nothing else: generating replies in your session, enforcing session and preview limits, processing payments, answering your emails, and meeting our legal obligations.

We never sell your data. We never rent it, trade it, or hand it to advertisers. There is no version of this business where your information is the product.

4. Private — but not privileged

We built the service so your conversation isn't sitting in our database at all. But you should know the legal reality: talking to an AI advice service carries no professional-client privilege. Unlike conversations with a lawyer or a licensed medical provider, session data that exists (for example, within our AI provider's limited retention window, or a transcript on your own device) could be subject to legal process. Private by design is real and we mean it — but it is not the same thing as privileged by law, and we won't pretend otherwise.

5. Who we share it with

Only the service providers that make the service function: Anthropic (AI processing of session messages), Stripe (payments), Netlify (website hosting and the session backend), and our email provider. Each handles data on our instructions to do its job — nothing more.

Beyond that, we would disclose information only if the law requires it (for example, a valid subpoena or court order), or if the business were ever sold or reorganized, in which case data would transfer with it under commitments at least as protective as these.

6. How long we keep it

  • Session content: not stored on our servers. Your browser holds your transcript until you clear it. Anthropic's API retention is limited and governed by its policy.
  • Operational session records (counts, timestamps, payment reference): deleted or anonymized within 12 months.
  • Billing records: kept as long as tax and accounting law requires.
  • Old interest-form submissions (from the site's earlier version): deleted on request, or after 24 months.

7. Your rights

Ask and you'll get a straight answer. Email hello@thirtystraight.com to:

  • See a copy of the personal information we hold about you;
  • Correct anything that's wrong;
  • Have your information deleted, except records we're legally required to keep (like billing records).

We aim to respond within 30 days. No forms, no runaround. (Your transcript is on your own device — deleting your browser data deletes it.)

8. Security, honestly

Here's the honest version, not the boilerplate one. This is a one-person operation. The accounts that run the service (Stripe, Netlify, email, our AI provider) are protected with strong unique passwords and two-factor authentication. The site is served over HTTPS. Card numbers never touch our systems — Stripe holds those. Session content never touches our database at all. No system is unbreakable, and we won't claim ours is. If a breach ever affected your data, we would tell you promptly and plainly, as the law requires.

9. Children

Thirty Straight is for adults. The service is not directed at anyone under 18, and using it requires that you're at least 18. We don't knowingly collect information from minors; if we learn we have, we'll delete it.

10. Changes to this policy

If we change this policy, we'll post the updated version here with a new date.

11. Governing law

This policy, and any dispute about privacy or data connected to Thirty Straight, is governed by the laws of the State of New York.

12. Contact

Questions, requests, or complaints about privacy: email hello@thirtystraight.com — a real human answers.