Privacy Policy

Effective Date: August 1, 2026

Last updated: October 6, 2026

We may update this Privacy Policy from time to time as our practices and services evolve. If you have questions, please contact us.

Olivier GIRAUDO Consulting LLC, doing business as DIY Consulting Hub (“DIY Consulting Hub,” “we,” “us,” or “our”), operates the DIY Consulting Hub website and platform (the “Service”). The Service offers a free Initial Diagnosis, a paid Deep Dive Action Plan, downloadable worksheets, and sessions with our consultants, together with a client portal and the tools our consultants use to deliver that work.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you. It covers visitors to our public pages, clients who use the client portal, and our consultants and staff (“Team Members”).

1. Information We Collect

Contact and business details: name, email, phone number, business name, website, address, industry, revenue range, team size and similar details you or your consultant provide.
Initial Diagnosis and Deep Dive Action Plan answers: the answers you submit, follow-up answers, satisfaction ratings and feedback, and whether you accepted the disclaimer (and which version).
Client portal account: your email address and a password (handled by our authentication provider), plus basic activity records such as sign-in times.
Purchases: what you bought, the amount, and the payment status. Card details are entered on Stripe’s pages and are never stored by us. For ITEX barter payments we record the transaction reference and your ITEX account number.
Live sessions: consultant sessions held on Zoom may be recorded and transcribed; transcripts are stored with your records and used to prepare your plan.
Messages, feedback and support cases: case numbers, message threads and resolution notes.
Public business information: to tailor your plan we may look up publicly available information about your business and its competitors (for example your business listing and website).
Team Member accounts: name, email, role, approval status and handbook acknowledgments.
Technical data: information your browser sends when you use the Service (such as IP address and device/browser details), used to operate and secure the Service, including limiting abuse.

Marketing website analytics: on our marketing website we use our own first-party analytics (not a third-party ad network) to understand how visitors find and use the site. For each page view we record a random visitor ID and session ID stored in your browser, the page address, the referring site, any campaign (UTM) tags, your device type (mobile, tablet or desktop), time on page, and an approximate country/region when our hosting provider supplies it. We do not record your name or email through analytics, we do not store your IP address, and we do not use fingerprinting. If you send us a message through the website form, we link it to that visit so we know how you found us. We never sell this information. You can opt out at any time: turn on “Do Not Track” or Global Privacy Control in your browser (we honor both), or use the opt-out on our site; your choice is remembered in your browser. Raw page-view records are deleted after 400 days; only daily totals are kept longer.

2. How We Use Information

To provide the Service: score your answers, generate your Initial Diagnosis, Deep Dive Action Plan and roadmap, and deliver them to you.
To process payments and refunds.
To send transactional emails such as receipts, report links, reminders and replies to your messages.
To send marketing email if you are subscribed; every marketing email includes an unsubscribe link.
To support, secure and improve the Service.

3. Service Providers We Share Information With

We do not sell personal information. We share information only with providers that help us run the Service:

Supabase and Lovable — hosting, database, authentication and file storage.
Stripe — card payments and refunds.
ITEX — barter payments, only when you choose to pay with ITEX.
Resend — delivery of transactional email.
Constant Contact — marketing email, with an unsubscribe option in every message.
Zoom — live sessions, recordings, transcripts and real-time session media.
Railway — hosts the worker that receives real-time Zoom session media and transcripts.
Calendly — scheduling of consultant sessions.
Google Places and Tavily — lookups of public business information.
AI model providers — your answers and related business details are sent to AI models (through our hosting provider’s AI gateway) to generate your diagnosis, plans and summaries.

We may also disclose information if required by law, or to protect the rights, property or safety of DIY Consulting Hub, our clients or others.

4. Data Security

We use role-based access controls, so consultants generally see only the clients assigned to them. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

5. Data Retention

We keep client, plan and payment records for as long as needed to provide the Service and for a reasonable period afterward for record-keeping, tax and legal purposes.

6. Report Links Are Sensitive

A report link lets anyone who has it view and download that report without signing in. Please do not share it with anyone other than the intended client. If a link was shared by mistake, contact us so we can revoke it.

7. Your Choices and Rights

You can unsubscribe from marketing email at any time using the link in any message. You can ask us to access, correct or delete your information by emailing admin@giraudoconsulting.com, subject to our legal and record-keeping obligations.

8. Children’s Privacy

The Service is intended for business use by adults. We do not knowingly collect information from anyone under 18.

9. Changes to This Privacy Policy

Material changes will be reflected by an updated “Last updated” date at the top of this page.

10. Contact Us

Questions about this Privacy Policy can be sent to admin@giraudoconsulting.com.