Privacy

Richard Gallagher operates this portfolio and its workshop. This page describes the site’s current behavior, as of 23 October 2026. The products shown here have their own operating environments; this portfolio is not a place to submit patient records or confidential business information.

When you send a brief

The contact form sends your name, email address, business description, selected work, recommendation, full AI proposal if attached, the brief you reviewed or edited, and a broad acquisition channel category to this server. The server saves the inquiry and its delivery receipt in private storage. AgentMail sends a copy to Richard’s Gmail inbox, with your email as the reply address. Richard uses it to review your inquiry and reply. The form does not send it to your customers.

If you choose “Open an email draft,” your email app handles the draft; you review and send it there.

When you talk with Pip

Your workshop messages, business context and relevant conversation history go through this server to OpenAI to prepare a reply or proposed build plan. Requests use the API’s store: false setting; that setting is not a promise that the provider keeps no service or security logs. Use public or fictional details. No customer systems or accounts are connected by this conversation.

The conversation and request recovery state are held in server memory for a limited visit, with a four-hour expiry and cleanup during later requests, and are lost on a server restart. An AI proposal becomes part of the saved inquiry when you submit it. If you use the client-setup demonstration, its reviewed plans, local example records and verification receipts are saved in private server storage so that you can resume that setup.

Browser storage and essential requests

The workshop uses an HttpOnly session cookie, courtyard_ai, restricted to the workshop API and set to expire after four hours. Public HTTPS uses the Secure flag. The browser saves motion preferences in local storage. The client-setup demonstration uses session storage for its saved run reference and editor state. Contact drafts stay in the current page’s memory until submitted or discarded.

Aggregate activity counts

The site counts product views and exits, Pip recommendations and hiring-form openings by broad product route and channel category such as direct, LinkedIn, email or referral. The counter keeps up to 90 daily buckets and prunes buckets older than 90 UTC days when another count is saved; no timer deletes an idle file. It stores no visitor identifier, IP address, full URL, form contents or conversation text, and sets no analytics cookie. Counts are events, not unique people or confirmed customer activations. These counts are handled by this server; no external analytics tracker is used for them.

To respond to a request, the server and its hosting service necessarily receive connection information such as an IP address and request headers. The contact service temporarily uses a hash of the connection address in memory to limit repeated submissions. Hosting and provider operational logs depend on their configured services; this page does not claim those logs are absent.

Retention and questions

Saved inquiries, email copies, setup artifacts and delivery evidence currently have no automatic deletion schedule. They remain until manually removed under the applicable account or storage controls. AI and email providers apply their own retention practices. Richard has not set a fixed retention period for these records.

For privacy questions or a request about information you supplied, email richard.gallagherxyz@gmail.com. Include your inquiry reference if you have one.