This school asks people to write down first-person things — what they know, what they chose, where their life cracked. That is unusually personal material, and this policy is written to be read, not to be clicked past. If anything here is unclear, write to hello@consciousnessalma.com and a human will answer.
Who we are
DMBranco, Inc., trading as CoCreating.School, 11298 Carmel Creek Road, San Diego, CA 92130, United States. We are the data controller for everything described below. Contact: hello@consciousnessalma.com.
What we collect
- —Enrollment details— your name and email address, the tier you chose, and whether a seat was gifted. Payment card details are entered on Stripe's own checkout page and never reach our servers; we receive only the outcome, the amount, and the last-four style metadata Stripe returns.
- —What you write in class — the offerings you submit through the Loom (our live classroom): poll answers, written lines, the anchors on your map, and the artifacts woven from them.
- —Questions you send us — anything submitted through the ask-the-school form or by email, including scholarship requests.
- —Your time zone— so class reminders can show the time where you are. Your browser already knows it (for example “America/Sao_Paulo”) and reports just that string. We do not look up your location, your city, or your IP for this.
- —Minimal technical data — ordinary web server logs (IP address, time, page requested), kept for security and troubleshooting.
We do not use advertising or analytics trackers. We do not profile you, and we do not sell, rent, or share personal data with anyone for their own purposes — ever. The classroom stores a short-lived session token in your browser's session storage so the room knows who you are; it is gone when you close the tab.
Where it lives
Our application and database run on servers we control at Hetzner in Helsinki, Finland — inside the European Union. We are a US company using EU-hosted infrastructure, which means your material sits under EU data protection standards by default rather than by request.
Who else processes it
- —Stripe — payments and receipts. They receive your name, email, and payment details directly.
- —Resend — sends our email (enrollment confirmations, class reminders, replies). They process your email address and message content.
- —Zoom — hosts the live classes. Their own privacy terms apply to what happens on the call.
- —Anthropic— the AI that weaves the cohort's written lines into shared artifacts during class. The lines you submit at a weaving station are sent for processing, without your name attached, and are not used to train their models under our business terms.
- —An image-generation provider (Google or OpenAI) — for the classes where the artifact is a picture. Only the description you write is sent.
What is recorded, and what never is
The concept segment of each class is recorded and shared with enrolled students. Practice reports, integration circles, and what people say about their own lives are never recorded. That rule is enforced by how the software is built, not only by etiquette.
Who can see your writing
Offerings you submit at an open station are visible to your cohort — that is the point of a room whose instrument is the group, and the join screen says so before you enter. Woven artifacts show the cohort's voices without attributing lines to individuals. Nothing you write in class is published outside your cohort, shown to other cohorts, or used in marketing without asking you first, by name, for that specific piece.
Why we are allowed to hold it
For enrollment and delivering the course: performance of our contract with you. For class reminders and course email: the same. For security logs and keeping our records straight: our legitimate interests. For anything else — a quote, a case study, a testimonial — your explicit consent, asked for separately.
How long we keep it
- —Your artifacts and logbook entries: kept while you have an account with us, because the course is designed to be revisited — and deleted whenever you ask.
- —Enrollment and payment records: seven years, because tax law requires it.
- —Server logs: 30 days.
- —Questions and scholarship requests: two years.
Your rights
Wherever you live, you may ask us for a copy of what we hold, to correct it, to delete it, or to stop using it. If you are in the EU or UK, those are your GDPR rights, including the right to complain to your data protection authority. If you are in California, they are your CCPA/CPRA rights, including the right to know and to delete — and note that we do not sell or share personal information as those laws define it. One email to hello@consciousnessalma.com is enough; there is no form. We answer within 30 days.
Children
This course is for adults. We do not knowingly enroll anyone under 18 or collect their data.
Breaches and changes
If personal data is ever exposed in a way that puts you at risk, we will tell you and the relevant authority within 72 hours of finding out — by email, plainly, without minimizing it. If this policy changes materially, enrolled students get an email; the effective date at the top always tells you which version you are reading.