Privacy Policy

The Reset Protocol (“we,” “us,” or “our”) is operated by Roan Priatel as a sole proprietorship in British Columbia, Canada. This Privacy Policy describes how we collect, use, store, and disclose personal information when you visit myresetprotocol.com (the “Site”) or purchase our services.

By using the Site or providing any personal information, you consent to the practices described in this policy. If you do not agree, do not use the Site or our services.

1. Who We Are

The Reset Protocol is a personalized digital document service. We sell a single product: a custom-built behavioral protocol delivered as a PDF, built from your responses to an 82-question intake. We are not a healthcare provider, medical practice, therapy service, or substance abuse treatment program. Nothing we provide constitutes medical advice, diagnosis, or treatment.

2. Information We Collect

We collect the following categories of personal information:

Information you provide directly:

• Name and email address (collected at checkout via Stripe)
• Billing address and payment method (processed by Stripe; we do not store payment card details)
• Intake responses (your answers to the 82-question intake form, including responses to validated clinical screeners — PHQ-2, GAD-2, SCOFF, AUDIT-C, and a suicidality screen)
• Any correspondence you send us via email

Information collected automatically:

• IP address, browser type, device information, referring URL, pages visited, and timestamps (via Vercel Analytics and standard server logs)
• Cookies necessary for site functionality

3. How We Use Your Information

We use your information solely to:

• Process your purchase
• Build, review, and deliver your personalized protocol
• Communicate with you about your purchase, your protocol, and follow-up check-ins at 30, 60, and 90 days
• Comply with legal obligations
• Detect and prevent fraud or abuse
• Improve our service (in aggregated, non-identifying form only)

We do not:

• Sell your personal information to anyone, ever
• Share your information with third parties for marketing purposes
• Use your intake responses for any purpose other than building your protocol and improving our underlying methodology in aggregated, anonymized form
• Train any artificial intelligence model on your individual identifiable responses without your explicit, separate, written consent

4. Clinical Screeners and Sensitive Information

The intake includes validated clinical screeners that ask about depression (PHQ-2), anxiety (GAD-2), disordered eating (SCOFF), alcohol use (AUDIT-C), and suicidal ideation. Your responses to these instruments are sensitive health-related information.

We handle these responses with additional care:

• They are encrypted in transit and at rest
• They are accessed only by Roan Priatel for the purpose of building your protocol
• They are never disclosed to third parties except where required by law or to protect imminent safety (see “Safety Reporting” below)
• They are retained for a maximum of two years from purchase, after which they are permanently deleted

5. Safety Reporting

If your intake responses indicate imminent risk of serious harm to yourself or others, we may, in our sole discretion, contact emergency services or a crisis line on your behalf. This is rare and only invoked where we believe in good faith that doing so is necessary to protect life. By using our intake, you consent to this limited disclosure.

If your responses trigger our safety gates (active suicidality, severe eating disorder pattern, severe alcohol or substance dependency, or age under 18), we will pause the protocol and may, depending on the trigger, issue a refund and recommend professional resources rather than proceed.

6. Service Providers

We use the following third-party services to operate the business. Each is bound by its own privacy policy and applicable data protection laws:

• Stripe (payment processing) — Stripe Inc., processes your payment card details. See stripe.com/privacy.
• Vercel (hosting, analytics, and database) — Vercel Inc. See vercel.com/legal/privacy-policy.
• Resend (transactional email) — Resend Labs Inc. See resend.com/legal/privacy-policy.
• Upstash (database via Vercel) — Upstash Inc. See upstash.com/static/trust/privacy.pdf.

We share only the minimum information necessary with each provider to operate the service.

7. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Purchase records: 7 years (Canadian tax requirements)
• Intake responses: 2 years from purchase, then deleted
• Email correspondence: 3 years from last contact
• Analytics data: 13 months (Vercel default)

You may request deletion of your personal information at any time by emailing hello@myresetprotocol.com. We will delete your data within 30 days of receipt unless we are legally required to retain it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Receive a copy of your information in a portable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a data protection authority

To exercise any of these rights, email hello@myresetprotocol.com. We respond within 30 days.

9. International Users

The Reset Protocol is operated from Canada. If you access our services from outside Canada, your information will be transferred to, stored, and processed in Canada and the United States (where some of our service providers are located). By using our services, you consent to this transfer.

10. Children

The Reset Protocol is for adults aged 18 and over only. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it and refund any payment. If you believe we may have collected information from a minor, contact us immediately at hello@myresetprotocol.com.

11. Cookies

We use only essential cookies needed for the Site to function (e.g., form save state, session tokens). We do not use advertising cookies or third-party tracking cookies. Vercel Analytics uses privacy-preserving analytics that do not require cookies or track individuals.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be announced via email to recent purchasers. Your continued use of the Site after changes constitutes acceptance.

13. Contact

Questions about this policy or our privacy practices:

Roan Priatel
The Reset Protocol
British Columbia, Canada
hello@myresetprotocol.com