Privacy Policy
Last updated: 24 July 2026
1. Who We Are
UNSAID is a global peer-support community founded by Pawel Pawlak.
- Website: unsaid.community
- Contact email: hello@unsaid.community
The data controller is Pawel Pawlak, operating as Magnis Centrum Pawel Pawlak (NIP: PL7272573636, REGON: 100080102), Obywatelska 102/104/308, 94-104 Lodz, Poland.
2. What This Policy Covers
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over your data.
This policy applies to:
- The website unsaid.community
- Email communications (newsletters, welcome letters, automated sequences)
- Witness Session bookings and payments
- Circle of Truth bookings and participation (a free weekly online group)
- The Mirror (a paid written exchange conducted by email)
- The Wall of Unsaid Words (anonymous sentence submissions and their publication)
- Contact forms
- Free downloadable materials, such as the printable companion at unsaid.community/catalog
- The book waitlist
- Any other interaction with UNSAID services
3. What Data We Collect
3.1 Data you provide directly
Your right to pseudonymity: UNSAID actively encourages the use of pseudonyms for session bookings, contact forms, and participation in Circles of Truth. Your psychological safety and privacy are a priority. You are never required to provide your legal name to access UNSAID services.
| Data | Collected via | Purpose |
|---|---|---|
| Email address and first name | Signup and resource request forms on unsaid.community (newsletter, 7-Day WIN Challenge, Witness Method guide, and similar) | Sending the resource you requested (such as a workbook or guide PDF), welcome and founding letters, weekly emails, and short educational email series you opt into |
| Name or pseudonym | Booking form, contact form | Identifying you for session scheduling and communication. A pseudonym is sufficient. |
| Payment information (card details) | Stripe payment page | Processing session payments. Card details are handled entirely by Stripe and never stored on our servers. |
| Booking preferences (date, time) | Calendly | Scheduling Witness Sessions |
| Message content | Contact form (Tally) | Responding to your inquiry and, if applicable, providing access to free sessions |
| Name or pseudonym, email address | Calendly booking page for the Circle | Reserving your free seat, sending the confirmation with the Google Meet link, and a reminder before we start |
| Payment information (card details) | Stripe payment page for the Mirror | Processing the one-time Mirror payment. Card details are handled entirely by Stripe and never stored on our servers. |
| Preferred first name (optional) | Stripe checkout field for the Mirror | Addressing you the way you choose in Mirror responses |
| The content of your Mirror letters | Email correspondence with mirror@unsaid.community | Delivering the Mirror: reading your letters and writing responses. See Section 3.6. |
| One anonymous sentence | The Wall form (Tally), embedded at unsaid.community/wall | Moderation and, where the rules allow, anonymous publication on the Wall and in UNSAID content. See Section 3.7. |
| Email address | The book waitlist form at unsaid.community/catalog | Telling you the day the full book is published, and sending occasional messages about the book itself. Our weekly letter reaches you only if you sign up for it separately. |
Please note that if you book and pay for a session, our payment and scheduling providers (Stripe and Calendly) will record identifying data such as the name on your card and your email address. For paid sessions, full anonymity is therefore limited, even if you use a pseudonym elsewhere on UNSAID.
The printable companion at unsaid.community/catalog downloads with no form and no email address. We ask for zero data at the moment of download.
3.2 Data collected automatically
| Data | Collected via | Purpose |
|---|---|---|
| IP address, browser type, device information | Website analytics (if enabled) | Understanding how visitors use the site and improving the experience |
| IP address, date and time, file requested | Our hosting provider's server logs | Keeping the site secure and diagnosing technical faults |
3.3 Data we never collect
- We never record Witness Sessions or Circles (audio or video). AI-powered transcription, automated note-taking, and automatic recording are disabled at the administrative level on all UNSAID Google Meet and Zoom accounts. Facilitators are contractually prohibited from enabling these features, and AI notetaker bots attempting to join a Circle or a session are denied at the door.
- We never store payment card details on our servers.
- We never request health or medical information through our website or forms.
- We never purchase data about you from third parties.
- We never collect your name, email address, or IP-based location together with a Wall sentence. The Wall form asks for one sentence and two confirmations, nothing else.
3.4 Sensitive data you may choose to share (Special Category Data)
UNSAID is a peer-support community. In contact forms, session bookings, or direct communications, you may voluntarily share information relating to your mental health, emotional state, or personal circumstances. Under GDPR, such information may constitute Special Category Data (Article 9).
By voluntarily including such information in your message, you provide explicit consent (GDPR Art. 9(2)(a)) for UNSAID to process it solely for the purpose of responding to your inquiry, scheduling your session, or providing appropriate peer support.
We will never use voluntarily shared sensitive information for any other purpose. We will never share it with third parties beyond what is described in Sections 5 and 5A of this policy. We will never use it for marketing, profiling, or analytics.
If you prefer to share no personal details about your situation, that is entirely acceptable. You can book a session or submit a contact form without disclosing anything about your emotional or psychological state.
Explicit consent for the processing of sensitive data is collected at the point of interaction: during session booking (via Calendly) and when submitting the contact form (via Tally). You give this explicit consent by ticking the dedicated, unticked consent checkbox before you submit the form. You remain free to share as much or as little about your situation as you wish.
3.5 The Circle: a group setting, by nature
The Circle is a small weekly group meeting held on Google Meet, booked through Calendly, free of charge.
- Booking asks for a name (a pseudonym is welcome) and an email address, used for the confirmation with the meeting link and for a reminder. Other participants never see your email address: confirmations go out individually, and we deliberately avoid shared calendar invitations.
- A group is a group: people in the room will see the name you booked with, see your camera if you switch it on, and hear whatever you choose to share. Every participant confirms the Circle rules at booking, including confidentiality (“what is said in the Circle stays in the Circle”). We hold everyone to that commitment, and at the same time no technical measure can stop a participant from breaking it. A pseudonym and a switched-off camera are always available, and both count as full participation.
- Circles are never recorded, and every participant is admitted to the room by hand.
3.6 The Mirror: written correspondence
The Mirror is a paid written exchange: five letters from you and five responses from us over one month, conducted entirely by email with mirror@unsaid.community.
- Your letters may, by their nature, contain information about your mental health, emotional state, or personal circumstances (Special Category Data under GDPR Art. 9). By purchasing the Mirror and voluntarily sending your letters, you provide explicit consent (Art. 9(2)(a)) for us to process what you share, solely to deliver the exchange.
- Your correspondence is read by one person: the Mirror Writer assigned to your exchange (at launch, the founder). It is stored in a dedicated, access-restricted mailbox protected with two-factor authentication.
- We never use the content of your letters for marketing, profiling, analytics, or the training of any automated system. Fragments of your letters are never quoted publicly.
- Every Mirror response ends with crisis resources. If a letter signals immediate danger, safety information goes out first, ahead of everything else; Section 8 (safety documentation) applies.
3.7 The Wall of Unsaid Words: anonymity by design
The Wall publishes anonymous sentences people never said out loud. The design collects the minimum possible:
- The form asks for one sentence and two confirmations (that you are 18 or older, and that you allow anonymous publication). It collects zero names and zero email addresses.
- The form provider (Tally) processes your IP address for one purpose only: preventing duplicate submissions. We never receive it and never see it linked to your sentence.
- A human reads every sentence before publication. Sentences that could identify a person are edited (marked “edited for anonymity”) or kept private. Sentences declaring an intent to die are never published; they stay private, crisis resources are shown at the point of submission, and the entry is deleted after handling.
- Your publication consent covers the Wall and UNSAID content (letters, cards, videos), always anonymously, as stated on the form.
- The “Witness this” counter stores a single number per sentence. The counting service (Cloudflare) processes your IP address transiently, solely for abuse prevention, and discards it within about a minute. Your browser remembers which sentences you witnessed locally, on your device (see Section 9).
- Removal: if a sentence on the Wall is yours and you want it gone, email hello@unsaid.community with the exact wording. We remove it, zero questions asked, and we require zero proof of authorship, because we hold zero data that could link a sentence to you.
4. Why We Process Your Data (Legal Basis)
Under GDPR, we need a legal basis for processing your personal data.
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Sending newsletters and letters after signup | Art. 6(1)(a): Your consent (you signed up voluntarily) |
| Processing payments for sessions | Art. 6(1)(b): Performance of a contract (you booked and paid for a session) |
| Scheduling sessions via Calendly | Art. 6(1)(b): Performance of a contract |
| Responding to contact form submissions | Art. 6(1)(f): Legitimate interest (responding to your inquiry) |
| Website analytics (if enabled) | Art. 6(1)(a): Your consent (via cookie banner) |
| Retaining safety documentation | Art. 6(1)(f): Legitimate interest (defense of legal claims, protection of participants) |
| Processing voluntarily shared sensitive data (Section 3.4) | Art. 9(2)(a): Explicit consent (given via a dedicated consent checkbox at booking and in the contact form) |
| Reserving and confirming your Circle seat | Art. 6(1)(b): performance of a contract (a free service you signed up for) |
| Delivering the Mirror (payment, scheduling of the exchange, correspondence) | Art. 6(1)(b): performance of a contract |
| Processing the content of Mirror letters | Art. 9(2)(a): explicit consent, given at purchase and reaffirmed each time you voluntarily send a letter |
| Moderating and publishing Wall sentences | Art. 6(1)(a): consent, given via the two checkboxes on the Wall form |
| Witness-counter abuse prevention (transient IP processing) | Art. 6(1)(f): legitimate interest (keeping the counter honest) |
| Sending book waitlist emails | Art. 6(1)(a): your consent, given by ticking the box on the waitlist form |
| Keeping server logs | Art. 6(1)(f): legitimate interest (site security and diagnostics) |
For every signup we record the date and the form that carried your consent.
For users in California (CCPA): We never sell your personal information. We never share your personal information for cross-context behavioral advertising.
5. Third-Party Services
We use the following third-party services to operate UNSAID. Each service processes your data according to their own privacy policy:
| Service | What it does | Their privacy policy |
|---|---|---|
| Sender (sender.net) | Email platform: stores your email address, sends newsletters, automated email sequences, and book waitlist emails | sender.net/privacy-policy |
| Stripe (stripe.com) | Payment processing: handles card details and transactions for paid sessions | stripe.com/privacy |
| Calendly (calendly.com) | Scheduling: manages session and Circle bookings, stores your name or pseudonym, email, and chosen time slot | calendly.com/privacy |
| Tally (tally.so) | Contact form and the Wall form: collects name, email, and message content from the contact form; collects one anonymous sentence and two consents from the Wall form | tally.so/privacy |
| Zoom or Google Meet | Video calls: hosts Witness Sessions and Circles | zoom.us/privacy or policies.google.com/privacy |
| Cloudflare (cloudflare.com) | The Wall's witness counter: stores per-sentence counts and processes IP addresses transiently for rate limiting | cloudflare.com/privacypolicy |
| AZ.pl Sp. z o.o. (az.pl) | Website hosting: serves the pages and files, and keeps server logs | regulaminy.az.pl/polityka-prywatnosci-az.pdf |
We select third-party services that maintain appropriate data protection standards. Your data is shared with these services only to the extent necessary to deliver the specific service they provide.
5A. Certified Witnesses and Facilitators
As UNSAID grows, Witness Sessions and Circles of Truth may be led by Certified Witnesses and Facilitators trained and certified by UNSAID. These individuals may have access to minimal personal data necessary to conduct sessions (such as your name or pseudonym, email address, and scheduled session time).
Safeguards in place:
- Every Certified Witness signs a binding Witness Declaration that includes strict confidentiality obligations.
- Every Certified Witness operating as an independent contractor or volunteer signs a Non-Disclosure Agreement (NDA) and a Data Processing Agreement (DPA) with UNSAID before gaining access to any participant data.
- Data shared with Certified Witnesses is limited to the minimum necessary to conduct the session or Circle.
- Certified Witnesses are prohibited from storing participant data on personal devices, sharing it with third parties, or using it for any purpose beyond the session itself.
- UNSAID maintains a supervision system that monitors compliance with these obligations.
6. International Data Transfers
UNSAID operates globally. Your data may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws.
For transfers from the EU/UK to countries without an adequacy decision, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- The data protection frameworks maintained by our third-party service providers.
7. How Long We Keep Your Data
| Data type | Retention period | Reason |
|---|---|---|
| Email address (newsletter subscribers) | Until you unsubscribe, plus 30 days for processing | Ongoing service delivery |
| Email address (book waitlist) | Until you unsubscribe, or 90 days after the full book is published, whichever comes first | The waitlist has one purpose and a defined end |
| Payment records | 7 years from transaction date | Tax and accounting obligations |
| Booking records (Calendly), sessions and Circles | 2 years from the session or Circle date | Service records and dispute resolution |
| Contact form submissions | 1 year from submission | Follow-up and service improvement |
| Mirror correspondence | 12 months from the close of your exchange, then deleted | Continuity if you return, and dispute resolution |
| Wall submissions kept private (unpublished) | Deleted within 30 days of moderation; entries declaring an intent to die are deleted immediately after handling | Data minimization |
| Published Wall sentences | Until you request removal | The Wall's purpose |
| Witness counts | Kept indefinitely: a bare number tied to a sentence id, holding zero personal data | Counter continuity |
| Safety documentation (incident reports, if any) | Minimum 10 years from date of record | Defense of legal claims. See Section 8. |
| Server logs | Kept under our hosting provider's standard retention cycle | Security and diagnostics |
| Cookie data | See Section 9 | Varies by cookie type |
After the retention period expires, data is deleted or anonymized.
8. Safety Documentation and Peer-Support Records
UNSAID is a peer-support community. In rare cases involving participant safety (such as a crisis during a session), UNSAID may create and retain safety documentation (incident reports).
This documentation:
- Contains factual descriptions of events and actions taken.
- Is stored securely with access restricted to authorized personnel.
- Is retained for a minimum of 10 years to enable defense of legal claims (GDPR Art. 17(3)(e)).
- May be disclosed to law enforcement or courts if required by a valid legal order.
If you request deletion, the entries in our internal Incident Register are anonymized. We remove all of your identifying information and keep only the date, the type of situation, and the steps taken. We retain this anonymized record instead of deleting it because, under GDPR Article 17(3)(e), it is necessary for establishing, exercising, or defending legal claims and for the safety of our procedures. This record is kept for a minimum of 10 years. All other data (email, name, booking history) will be deleted within 30 days of your request.
9. Cookies
9.1 What cookies we use
Cookies from unsaid.community: our own pages set zero cookies. Anything we store stays in your browser’s local storage, described below.
Analytics cookies: Used to understand how visitors interact with the site. Analytics tools are not currently active. If enabled in the future, they will require your consent.
Third-party cookies: Set by embedded services (the Calendly embed and the Sender signup form). Subject to those services’ cookie policies. The Tally form on the Wall page sets zero tracking cookies for respondents, as described in 9.2.
Local storage: your browser holds two kinds of entry from us. The Wall page marks each sentence you have witnessed, so a second tap avoids double counting. The cookie banner records your choice, so the banner stops asking on later visits. Both kinds stay on your device and are never transmitted to us.
9.2 Managing cookies
The current version of unsaid.community runs no analytics, and your banner choice is stored in your browser’s local storage. The scheduler embed (Calendly) and the signup form (Sender) load with the page and may set cookies from calendly.com and sender.net; their policies apply, and you will find both links in Section 5. The Wall form (Tally) loads directly, because Tally sets zero tracking cookies for form respondents by default, and the form keeps zero data on your device beyond your own answers. You can also manage cookies through your browser settings (blocking or deleting cookies).
10. Your Rights
Depending on your location, you have the following rights regarding your personal data:
All users:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data (subject to exceptions in Section 8).
- Objection: Object to processing based on legitimate interest.
- Portability: Request your data in a machine-readable format.
EU/UK users (GDPR/UK GDPR) additionally:
- Restrict processing: Request that we limit how we use your data.
- Withdraw consent: Withdraw consent at any time (the lawfulness of processing before withdrawal remains unaffected).
- Lodge a complaint: File a complaint with your local data protection authority.
California users (CCPA) additionally:
- Know: Request information about what data we collect and how we use it.
- Delete: Request deletion of your data.
- Non-discrimination: We will never discriminate against you for exercising your rights.
How to exercise your rights: Send your request to hello@unsaid.community. We will respond within 30 days (GDPR) or 45 days (CCPA). We may ask you to verify your identity before processing your request.
Unsubscribing from emails: Every email we send includes an unsubscribe link at the bottom. Clicking it removes you from the list that email came from, and it leaves the other list untouched. You can also email us directly to request removal from one list or from both.
11. Children
UNSAID services are intended for adults (18 years and older). We never knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at hello@unsaid.community and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email to active subscribers and posted on this page with an updated effective date.
We encourage you to review this page periodically.
13. Contact us about this policy
For any questions about this Privacy Policy or your personal data:
- Email: hello@unsaid.community
- Address: Magnis Centrum Pawel Pawlak, Obywatelska 102/104/308, 94-104 Lodz, Poland
Supervisory authority: The lead supervisory authority for data protection is Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warszawa, Poland. Website: uodo.gov.pl. Email: kancelaria@uodo.gov.pl. Phone: +48 22 531 03 00.
If you are located in another EU/EEA member state, you also have the right to lodge a complaint with the Data Protection Authority in your country of residence.
For users outside the EU: please contact us directly at the email address above. We will do our best to resolve your concern promptly.