Privacy Policy

Website and paid Walk service

Who we are

Sufficient Certainty Pty Ltd ("we", "us") operates sufficientcertainty.com and the Walk decision-coaching service.

What we collect

• Email address: when you start a Walk or subscribe to updates.
• Walk conversation data: the decisions, options, assumptions, and other inputs you provide during a Walk session.
• Payment information: processed by Stripe. We do not store card numbers.
• Analytics: anonymous page-view and event data collected by Umami (no cookies, no personal data, self-hosted).

How we use it

• To deliver your Walk session and generate your Decision Record.
• To send your 30-day check-in email (one follow-up, then we stop).
• To process payments securely through Stripe.
• To improve the service based on aggregate, anonymised usage patterns.

What we do not do

• We do not sell, rent, or share your personal data with third parties for marketing.
• We do not use tracking cookies or fingerprinting.
• We do not train AI models on your Walk conversations.

Data storage and retention

Walk data is stored in a Supabase-hosted PostgreSQL database. We retain your Walk data for as long as you need access to your Decision Record. You may request deletion at any time. For a Private Walk, conversation and decision content is purged 30 days after the Decision Record is delivered, or after 30 days without activity if no record is delivered. Choosing to share the conversation exempts that Walk from this scheduled purge.

Optional context import

Before starting a Walk, you can paste a concise summary of relevant background from an assistant. Optional automatic transfer through Claude or Codex is also available. For automatic transfer, the assistant sends only information available to it in the conversation or authorised project material, and only when you ask it to. This does not give us access to your assistant account, its full conversation history, or its stored memory.

Pasted context stays in a draft in your browser while you edit it. The draft context expires after 30 minutes. Begin sends it to the website and attaches it to your Walk. Automatic transfer uses a temporary request that expires after 30 minutes. Removing context before Begin deletes the draft and any temporary website copy. Expired temporary summaries cannot be imported. A cleanup task is scheduled every minute to delete them from storage; a delayed task can delay physical deletion. A failed Begin keeps received context available for retry within its lifetime.

Context attached to a Walk is processed with your other Walk inputs, including by the AI providers used to deliver the service. It is not treated as confirmed information or as completion of a decision step. The Walk's selected privacy and retention settings apply to it, including the Private Walk deletion rules described above. You can request deletion of the Walk after starting.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Contact us and we will respond within 30 days.

Third-party services

• Stripe: payment processing (their privacy policy).
• Umami: privacy-friendly, cookieless, self-hosted analytics (about Umami).
• PostHog: product analytics, session recordings, and heatmaps. Uses cookies to link sessions across subdomains (their privacy policy).
• Resend: transactional email delivery.
• Vercel: website hosting.

Contact

For privacy-related questions, reach us through our LinkedIn page.

Changes

We may update this policy. Material changes will be noted on this page with a revised effective date.

Privacy: The Walk: Decide Better in ChatGPT

Plugin section effective 4 October 2026

This section covers the skills-only ChatGPT plugin published by Sufficient Certainty Pty. Ltd. It distinguishes the plugin from the separately operated Walk website service.

Plugin conversations

The plugin supplies decision-coaching instructions within ChatGPT. It has no separate publisher account, MCP connection or developer-operated storage of conversations. It does not send the conversation to a Sufficient Certainty server. The website service's email registration, payment processing, conversation database and follow-up emails do not form part of this plugin.

ChatGPT

OpenAI provides ChatGPT. Its applicable policies and your account settings govern its processing of your chats. This plugin notice does not promise a particular retention period, training setting or deletion outcome for data held by OpenAI.

Optional website visits

If you choose to follow the methodology link, you leave ChatGPT for our website. Our website privacy policy applies to that visit and to any separate website service you choose to use. Following the link is not required to receive the complete plugin review.

Support

If you contact us for support, you choose what information to include. Do not send confidential decision details unless needed. Our existing privacy policy provides a route to request access, correction or deletion through LinkedIn and states that we respond to those requests within 30 days. Support messages are accessible to the administrator. We retain them indefinitely unless you request deletion. Contact us through our LinkedIn page to request access, correction or deletion; our existing policy states that we respond within 30 days. LinkedIn also processes messages under its own policies.

About the ChatGPT plugin · Plugin support