Privacy Policy — Archived Version

1. Scope

This Privacy Policy applies to visitors of:

• •ryanh.com
• •experienceplus.ai
• •aileadership.one
• •Any subdomains of these sites
• •Future websites operated by Ryan Hanau, Inc. ("RHI", "we", "us")

This policy covers only website visitors and form submissions, not client relationships and other matters.

2. Information We Collect

Automatically Collected:

We may collect:

• •IP address
• •Browser type and version
• •Referring website
• •Pages visited and time spent
• •Date/time of visit
• •Device information

Information You Provide:

• •Name
• •Email address
• •Phone number (if provided)
• •Message content from contact forms
• •Additional information you choose to share when contacting us
• •Account credentials (email and password) when you register for or sign in to gated areas of our sites (e.g., portfolio.experienceplus.ai and related subdomains). Authentication is managed via our backend provider; we do not store passwords in plaintext.

Third-Party Collection:

Some features of our websites may be built using third-party platforms that collect their own analytics and usage data. We cannot control or disable all third-party data collection embedded at the platform level.

3. How We Use Information

We use collected information to:

• •Respond to your inquiries
• •Provide requested information or services
• •Prevent spam and fraud
• •Improve website functionality
• •Analyze website usage patterns
• •Send marketing communications (only with your consent)
• •Comply with legal obligations

We do not sell, rent, or trade your information to third parties for their marketing purposes.

4. Cookies and Tracking

Our Cookies

We use limited essential cookies for website functionality, including a session cookie scoped to .experienceplus.ai that enables single sign-on across our subdomains. These cookies are necessary for the website to operate properly. You can disable cookies through your browser settings, though some features (including sign-in) may not work correctly.

Analytics

We use Umami, a privacy-preserving, open-source analytics tool that we self-host on our own infrastructure. Umami does not use cookies and does not collect any personally identifiable information. It records only aggregated, anonymized usage data — such as page views, referring sites, and general device, browser, and country information — to help us understand how our sites are used and improve them. Umami does not track you across other websites, does not create a profile of you, and does not sell or share your data. Because it collects no personal data and sets no cookies, no analytics consent banner is required. You can opt out of analytics at any time by using a browser or extension that blocks analytics scripts.

Third-Party Tracking

If our websites are built or hosted using third-party platforms or services, those platforms may implement their own analytics or tracking that we cannot fully control. We are not responsible for platform-level tracking.

5. AI Development Disclosure

Portions of our websites may be developed using artificial intelligence tools. We use various platforms to build our sites. These platforms have their own privacy practices beyond our control.

6. Information Sharing

We may share your information with:

Service Providers

• •Web hosting services
• •Email service providers
• •Website hosting and infrastructure (note: our analytics are self-hosted with Umami, so usage data is not shared with any third-party analytics provider)
• •Security and anti-spam services
• •Other service providers necessary to operate our websites

Legal Requirements

We may disclose information when required by law, court order, or legal process, or when necessary to:

• •Protect our rights or property
• •Prevent fraud or cybersecurity threats
• •Respond to government requests
• •Protect public safety

Business Transfers

Information may be transferred in connection with a merger, acquisition, or sale of assets.

7. Data Retention

• •Contact form submissions: Retained as needed for business purposes or legal requirements.
• •Authentication records (account email, session metadata): Retained for the life of your account; deleted on request per §9.
• •Security and abuse-prevention logs (IP addresses tied to login attempts and rate-limit windows): Automatically purged on a rolling schedule — login-attempt records after 90 days, rate-limit records after 7 days.
• •Website analytics: Automatically deleted after standard periods set by analytics providers.
• •Legal compliance: We may retain information longer if required by law or for legal defense purposes.

8. Security

We implement commercially reasonable security measures appropriate to the nature of the information collected. However, no internet transmission or storage system is completely secure. We cannot guarantee absolute security of your information. We maintain incident response procedures in compliance with applicable law.

9. Your Rights

You may request to:

• •Access information we have about you
• •Correct inaccurate information
• •Delete your information (subject to legal requirements)
• •Opt out of marketing communications
• •Know what information we collect and how we use it

To exercise these rights, use our contact form at https://experienceplus.ai/contact.

California Residents

California residents have additional rights under CCPA/CPRA:

• •Right to know categories of information collected
• •Right to know if information is sold or shared (we do not sell personal information)
• •Right to opt out of sale (not applicable as we don’t sell data)
• •Right to limit use of sensitive personal information
• •Right to non-discrimination for exercising privacy rights

EU/EEA Residents

If you are in the EU/EEA, you may have additional rights under GDPR, including data portability and the right to lodge a complaint with your local data protection authority.

10. Third-Party Links

Our websites may contain links to other sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policies of any linked sites you visit.

11. Children's Privacy

Our websites are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete it promptly.

12. International Data Transfer

This Website and all associated services are operated by RHI and are intended solely for users located outside the European Economic Area (EEA). We do not collect, store, or process personal data from individuals who are physically present in the EEA. If you are an EU/EEA resident, please refrain from submitting any personally identifying information. Should any EU-resident personal data be received inadvertently, we will promptly delete it from our systems and confirm the deletion upon request. For users outside the EEA, if you access our websites from outside the U.S., your information will be transferred to and processed in the U.S.

13. Changes to This Policy

We may update this policy periodically. Check the "Last Updated" date for the most recent version. Continued use of our websites after changes constitutes acceptance of the updated policy.

14. Platform Limitations

Our websites may be built or hosted using third-party platforms that impose their own technical features, analytics, or data collection that we cannot fully control or disable. While we select platforms with privacy in mind, we are not responsible for platform-level features beyond our control.

15. Do Not Track

Our websites do not respond to "Do Not Track" browser signals. Some third-party services we use may track your activities across other websites.

16. Contact Information

For privacy questions or to exercise your rights:

• •Contact Form: https://experienceplus.ai/contact
• •Mail: Ryan Hanau, Inc., 1831 Poipu Rd Apt 720, Koloa, HI 96756-9429

All privacy-related requests should be submitted through our contact form for fastest response.