Privacy
Use what is needed. Protect what is not.
Last updated: October 5, 2026.
Browser-local tools
The Signal Check, Napkin Math, Owner Load Check, and public Northstar Compass samples on this website run in your browser. Northstar does not receive your individual answers, raw calculator inputs, owner-load entries, or Compass sample choices unless you separately choose to share them. Compass sample choices are not saved by the page and reset when you leave or choose reset. The Business Picture on the Tools page is stored only in your browser until you clear it.
Front Door Check
The Front Door Check on the Business Check page does its arithmetic on Northstar's server, not in your browser. It sends the business name you type, your trade, the numbers you enter, and your answers, and the server sends back your reading. The check doesn't save that name or those answers in Northstar's database. Northstar keeps its own records on local businesses it has researched from public sources. If the name you type matches one, the check asks you to confirm before it shows any of that record. If you tell Northstar something on file is wrong, that correction is saved so Japheth can fix the record.
Information you choose to share
If you email, call, text, request a conversation, purchase, sign an agreement, use a client system, or otherwise work with Northstar, Northstar and its configured service providers may process the information reasonably needed to respond and operate that relationship.
Start Here form
The Start Here form sends what you enter to Japheth by email: your name, business, email address, phone number if you give one, your answers to the questions on the form, and the page you sent it from. The website doesn't keep a copy in its database. If the send fails, the page opens a draft in your own email application instead, and you decide whether to send it.
Website build requests
When you request a build through Build Mine on the Websites We Build page, Northstar stores what you enter: business name, contact name, email, phone, primary service area, industry, your current website if you have one, and anything you add in the note. It's kept so Northstar can research your business, build the first version, and answer you. The request is emailed to Japheth, and one confirmation email goes to the address you gave. No payment is taken to request a build. To limit abuse, the request is stored with a salted one-way hash of your IP address, not the address itself. If a link in a Northstar email brought you to the page, the request also records which email that was.
Private website previews and purchases
If Northstar builds a website for your business and sends you a private link to it, the site records when that link or the preview site is opened and tells Japheth by email, so he knows you've seen it. Change requests and questions you send from your private page are stored and emailed to him.
If you buy the site, checkout runs on Stripe. Your card details go to Stripe, not to Northstar, and Stripe keeps the card on file for the monthly charge. Northstar stores the order: the business, the amount, the version of the terms you agreed to, the payment status, Stripe's reference numbers, and the buyer name and email Stripe reports. After a purchase, the launch details you send, such as your domain, your registrar, and the phone and email to show on the site, are stored and emailed to Japheth. Do not send passwords. The form turns away anything that looks like one.
Client rooms
If you ask the Client Login page to email your room link, Northstar checks the address you type against the addresses already on file for that kind of client and, if one matches, emails the link to the address on file. The address you typed isn't stored. Northstar keeps a record of the request: which door, the time, the outcome, and salted one-way hashes of the email address and your IP address, used to limit abuse. A Front Door System room link is stored only as a one-way hash, so a lost link is replaced with a new one. A room stores the business and contact details Northstar entered, the Start Gate status, the note Japheth writes to you, and any change or question you send from it. Don't put passwords in a room message.
Nora, the A.I. Concierge
Before a conversation with Nora starts, a Cloudflare Turnstile check confirms a person is there. Your messages go to Northstar's server and on to OpenAI's API, which screens them and writes Nora's replies. The conversation itself is kept in your browser tab, not in Northstar's database. The database keeps a record of the session: when it started, which page you were on, how many messages were sent, any safety flag, a thumbs up or down if you give one, and a salted one-way hash of your IP address, used to limit abuse. A session cookie connects your browser to that session until it expires. If you ask Nora to pass a note to Japheth, the name, contact details, and note you approve are stored and emailed to him. Do not share passwords, payment information, medical records, or confidential client information with Nora.
Constraint Sprint corridor
If you book a Sprint conversation, Northstar stores the contact and scheduling information you provide, the finding carried from the Front Door Check, your exact Scope Card and acceptance, payment status, readiness confirmations, delivery milestones, and the results-review record. Your private access token is stored by Northstar only as a one-way hash. The token itself stays in your browser and in any private link you choose to copy. Do not enter passwords, security codes, payment-card data, medical information, or unrelated employee records in a Sprint note.
Payment-card information is entered with the configured payment processor and is not stored in the Sprint corridor. Calendar and meeting providers receive only what is needed to hold the conversation. Northstar may send limited lifecycle events, such as booked, paid, active, and reviewed, to its approved CRM. Raw diagnostic answers and access credentials do not belong in those events.
Client systems
A Northstar client system may store organization, user, implementation, support, training, visit, agreement-status, billing-status, and performance information needed to deliver the agreed relationship. Payment credentials should be collected by the configured payment processor rather than placed in ordinary Northstar form fields.
Self Mastery Compass
The live Self Mastery Compass stores participant answers, progress, generated reflections, and the operational events needed to run and improve the experience. A private browser cookie reconnects the device to its session. A participant can begin without creating an account or providing contact information. If a browser contains another person's work, the participant can open a new private session without seeing the earlier answers.
Optional voice answers
When voice answers are available, recording begins only after the participant chooses to start. The recording is sent securely to OpenAI's audio transcription service. Northstar uses the returned text and does not save the raw audio after the transcription request. The participant can edit the transcript, and it is not submitted as a finished answer automatically. OpenAI states that API data is not used to train its models by default. Provider practices are reviewed before Northstar enables or materially changes this feature.
De-identified improvement
Northstar may use de-identified patterns to improve questions, interpretations, recommendations, timing, safety, and outcomes. Improvement data should remove direct identifiers, use grouped reporting where practical, and keep participant answer text out of ordinary analytics tools. Northstar does not offer participant answers as training material for a third party's general model.
Analytics and service providers
The production site may use approved providers for hosting, analytics, CRM, scheduling, email, e-signature, payment, communications, file storage, automation, and support. Today the website itself uses Cloudflare for hosting, the database behind the forms above, page-view analytics, and the Turnstile check; Resend to deliver email; Stripe to take payments; and OpenAI's API for Nora's replies. Sensitive diagnostic answers, raw payment information, private credentials, and unnecessary personal data should not be sent as analytics parameters.
Cloudflare Web Analytics counts page views on this site. Cloudflare states that it works without cookies. The Websites We Build page and the example sites it opens also report a short list of events to Northstar, such as a visit, an example opened, or the build form started. Each event carries the page, which example, and a salted one-way hash of the IP address, used to limit abuse and to count a visitor once. If a link in a Northstar email brought you to that page, a cookie remembers which email for 90 days, so your visit and any build request can be matched to the business that email was sent to. These events carry none of your form answers.
Data choices
You may contact Northstar to ask a privacy question or request access, correction, or deletion where applicable. Legal, security, transaction, and recordkeeping obligations may limit a request.
Questions
Call or text 812-645-1108, email GetYourFreedomBackToday@gmail.com, or use the routes on Start Here.