TITAN | Privacy policy

Who is responsible

Harvey Gombos, a sole trader trading as TITAN, is the controller of personal information collected for the TITAN website and accounts. Contact harvey@titandnb.com about privacy, your information or account closure.

This notice covers the website, member accounts, Stripe membership payments and the separately authorised administrator calendar connection. This also covers integrated mentoring bookings when Harvey enables them. Private recording delivery is connected.

Information we use

Browsing: hosting infrastructure processes technical request information such as IP address, requested pages, browser or device information and request times to deliver and protect the website. Application error reporting is limited to non-sensitive messages.
Google sign-in: we receive your Google account identifier, name and verified email address. We store these with a TITAN account identifier and creation date. We use temporary login challenges and expiring session records to authenticate you securely. You may also choose a single-use email sign-in link; we store your email address, a hash of the temporary token and a browser-binding hash. Raw sign-in tokens are not stored in our database.
Promoter packs: if you choose to add one, we store your DJ or artist name, bio, uploaded press photos or photo-folder link, visuals/logo links, rider text or document link, promo-video links, mix links, social links, booking contact details and last-updated date privately in your account for you and authorised TITAN administrators. Uploaded photos are stored privately in TITAN’s separate Bunny Storage zone. Linked files remain with your chosen provider. You can update or clear these details from your account. Clearing links does not delete external files. Authorised TITAN administrators can download selected packs as a portfolio to share with promoters. Downloaded files contain copies of uploaded photos and saved pack details. This is a separate manual action, not automatic distribution.
Contact: when you email TITAN, we receive your address and the message or attachments you choose to send. Avoid sending information that is unnecessary for your enquiry, particularly sensitive personal information.
The discovery-page focus selector stays in your browser. The booking button opens Calendly, where you choose a time and provide your booking details. Calendly processes those details under its own privacy notice. No Calendly embed loads on this website.

Why we use it

Google sign-in is not consent to marketing. This website currently runs no marketing mailing-list integration, advertising pixels or visitor analytics. We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

To provide your account, process your subscription, manage session allowance and bookings, deliver mentoring and send necessary service messages: we rely on contractual necessity, including steps you request before a contract.
To secure the website, prevent misuse and investigate faults: we rely on our legitimate interests in running a reliable service and protecting users. We limit this use to what is necessary and consider your rights.
To answer general questions and resolve complaints: we rely on our legitimate interests in responding and resolving issues, or contractual necessity where your message concerns a service contract.
To keep records required for accounting or tax and respond to valid legal requests: we rely on the relevant legal obligation.

Payments, mentoring notes and recordings

Optional recording and enabled AI transcription or summarisation rely on your informed consent. Harvey confirms your preferences verbally before recording and discusses an alternative if you decline. Tell Harvey or email harvey@titandnb.com to withdraw consent for future recording or request review or deletion of existing material. Essential payment, booking and security records may have a separate lawful basis.

TITAN imports Zoom-generated notes when available; it does not send your transcript to a separate AI writing service. Automated notes do not decide your membership eligibility or replace Harvey’s feedback.

Payments: Stripe customer and subscription references, the agreed price, payment and cancellation status, paid-period dates and refund or dispute information used to administer access and resolve billing enquiries.
Sessions: your chosen date and time, session focus, booking changes, meeting references and private mentoring notes saved by Harvey or an authorised administrator. Notes support your mentoring and are not public member content.
Zoom recordings: audio, video, display names, shared-screen content and any enabled transcript, captions, summary, next steps or chapters. Avoid sharing sensitive or unrelated information on screen or during a recorded session.
Recording delivery: the relevant video and supporting details are imported into TITAN and Bunny.net for private playback. We store ownership or explicit access grants, processing status and administrative edits. Group-session participants may be visible or audible to others authorised for that group recording.
Service messages and administration: email recipient, necessary message content, delivery status and attempts, plus action history for changes to bookings, member access, announcements and recordings. These support delivery, accountability and fault investigation.

What Google sign-in can access

Sign-in requests your basic profile and email only. It does not request access to Gmail, Google Drive, your Google Calendar or your contacts. TITAN does not receive your Google password. Ordinary member sign-in does not store Google access or refresh tokens for later use.

Google handles its own authentication and related security processing under its privacy policy. You can manage the TITAN connection in your Google Account. Removing that connection does not itself delete your TITAN account or end an existing TITAN session; contact us for deletion and use Sign out to end your session.

Harvey’s calendar connection

Harvey can separately authorise TITAN to list his calendars, check busy times and manage TITAN mentoring appointments on an owned calendar he selects. These are administrator permissions, not permissions requested from members. TITAN checks selected calendars for availability and reads the time and status of its own mentoring events to reflect changes made in Google. It does not retrieve unrelated appointment titles or descriptions.

We use this access to arrange mentoring sessions at Harvey’s and the member’s request. We store the verified calendar-owner identifier and email, granted permissions, selected calendars, teaching hours, connection/check times and an encrypted offline refresh credential. A booking stores the member reference, session focus, optional mix link, dates, allowance, Google event identifier and status. The member’s email, session focus and optional mix link are included in the private appointment on Harvey’s selected calendar. Booking and cancellation emails to Harvey include the member’s name, email, session time and focus; Members receive confirmation and cancellation emails at their verified account address. TITAN stores the message and delivery attempts to support reliable delivery. Short-lived access tokens and unrelated busy-time responses are used only on the server and are not stored or sent to members.

Disconnecting removes the saved credential and pending connection attempts from TITAN. Google’s permission grant can also be removed in Google Account connections. A temporary browser-bound authorisation attempt expires after 10 minutes, and expired attempts are removed when another connection starts. Backup copies follow the hosting provider’s retention cycle. Google data is used only for this calendar feature, never for advertising, resale or training AI models.

Cookies and browser storage

These cookies support the sign-in service you request. You can block or delete them in your browser, but sign-in will then not work reliably. We do not set analytics or advertising cookies through the current website. Stripe checkout, Zoom and the private Bunny.net player may process technical connection information and use storage necessary to deliver their services. Separate sites you choose to visit have their own cookie notices.

__Host-titan_email_request: a necessary security cookie used when you request an email sign-in link. It binds the link to your browser, lasts up to 15 minutes and is cleared after successful confirmation.
__Host-titan_google_attempt: a necessary security cookie that links a sign-in request to your browser. It lasts up to 10 minutes and is cleared after the callback.
__Host-titan_calendar_attempt: an administrator-only security cookie that binds calendar consent to the initiating browser for up to 10 minutes. It is cleared after the callback or disconnection.
__Host-titan_identity: a necessary cookie that keeps you signed in. It expires after 30 days or is cleared when you sign out. TITAN stores a hash of its secret value on the server.

Who receives information

Harvey and people authorised to maintain the TITAN service may access the information needed for their work. Render provides website and database hosting, including the infrastructure it uses to deliver and protect the service. Google provides optional Google sign-in. Resend delivers requested sign-in links and service messages, processing the recipient address and email content. If you email us, the email services used to deliver and receive your message also process it.

We may disclose relevant information where required by law or where necessary and lawful to handle a dispute or protect people and the service. We do not sell your personal information.

We do not enable email open or click tracking. Branded emails may load the same public TITAN images and fonts for every recipient; these asset URLs contain no individual tracking identifier.

External links, including social platforms, event booking agencies and any booking service you choose to use separately, lead to independent websites. Their operators handle your information under their own notices. Stripe handles hosted membership checkout, recurring payments, invoices and the billing portal. Zoom supplies online meetings, cloud recordings and enabled transcription or AI summary features. Bunny.net stores and streams imported videos through its private Stream library. These services receive the information necessary for their roles; TITAN does not receive full card details.

Where information is processed

The TITAN account database is configured in Render’s Frankfurt region in Germany. A regional database does not mean all service information stays in that region: hosting support, infrastructure providers and Google may process information internationally, including in the United States.

The connected providers include Render, Google, Stripe, Resend, Zoom and Bunny.net. Their infrastructure and support may process data outside the UK, including in Europe and the United States. Where a restricted transfer occurs, an applicable UK adequacy arrangement or appropriate contractual safeguards, such as standard contractual clauses with the UK Addendum, are required. Contact Harvey for details and copies of safeguards relevant to your information. A regional database does not guarantee UK-only or EU-only processing.

How long we keep information

Your account record remains while you keep a TITAN account. You can request account closure and deletion by email. Signing out expires your session, but does not delete the account.

Google login challenges expire after 10 minutes, email sign-in links after 15 minutes and sessions after 30 days. Expired records cannot authenticate you; they are removed during subsequent admitted login starts. A completed challenge is consumed immediately and a signed-out session is revoked immediately. Expiry and physical deletion are different events.

We keep correspondence and relevant records for as long as needed to answer your enquiry, resolve a complaint or meet a specific legal requirement. The criteria are whether the matter remains open, a genuine dispute needs evidence, or a legal duty requires retention. We restrict retained information to those purposes. Copies in provider logs and backups may remain until their retention cycles complete; ask us for details relevant to your request.

Recording retention and access

We retain recordings and associated notes indefinitely to provide your ongoing private learning archive, including after paid membership ends. We review deletion requests against those purposes and any legal requirement, and restrict any material retained for a dispute to that purpose. A multi-person recording may need editing to protect other participants when responding to a request.

Importing a recording into Bunny.net does not automatically delete its Zoom source. Turning off playback, cancelling membership or signing out is not deletion. There is currently no fixed automatic deletion interval for imported recordings. Ask Harvey to arrange deletion or obtain information about a particular recording; provider backups and logs follow their own retention cycles.

Your rights and choices

Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, or receive a portable copy. We may need to verify your identity. We normally respond within one month, subject to the extensions and exceptions allowed by law.

You have the right to object to processing based on legitimate interests. Tell us about your situation so we can consider the objection. You can always object to direct marketing; signing in does not subscribe you to it.

Where an optional use relies on consent, including agreed session recording and AI transcription or summarisation, you can withdraw that consent by telling Harvey or emailing us, without affecting the lawfulness of earlier processing. You can complain to the Information Commissioner’s Office, the UK data-protection regulator, whether or not you have contacted us first.

Make a complaint to the ICO ↗

Changes to this notice

We will update this notice when the service or its use of information changes. Material new purposes or wider sharing will be explained before they begin. The date at the top identifies the current notice.