This notice supplements the Privacy Policy for U.S. residents.
Updated 9 November 2026 · Version 3.2
Scope
State rights depend on the applicable law’s definitions, thresholds and exceptions. This notice does not assert that every state consumer privacy statute applies to every activity. Presence accounts, Fellowship accounts and product evaluations have separate service notices.
Categories, sources and purposes
Swipe or scroll the table to read every column.
| Category | Source and use |
|---|---|
| Identifiers and contact information | You supply your name, email, organization where required, message and selected inquiry context. Volume inquiries can include role, company size, regions, initial users, sites, use case, timing, and product/finish/quantity selections. Hosting processes IP/request information. Used for delivery, security and requested correspondence. |
| Release-interest and acknowledgement records | You supply country/region, selected finish, quantity and acknowledgements. The service records a reference, terms version, time and delivery state to administer the free reservation. |
| Purchases and newsletter choices | You supply personalisation, band size, edition selection and optional newsletter choice. Stripe supplies checkout name/email, billing/delivery addresses, payment/tax/refund status and references. We use them to process and fulfil the purchase, administer contractual benefits, provide support and necessary emails, and meet recordkeeping obligations. Optional product news requires email confirmation and can be stopped at any time. |
| Technical activity | Hosting receives path, time, browser/device, referrer and security signals to deliver and protect pages. Vercel Web Analytics measures public page views and aggregate visitors without tracking cookies. We exclude private service pages and remove URL queries and fragments. We do not add click, scroll or visitor-organization analytics. Browser opt-out controls are in the Privacy Policy. |
| Local preferences | Appearance and audience choices use local storage; product identifiers, finishes and quantities use session storage for Your bag or Your setup. Inquiry URLs and submitted messages may include your selection. |
| Public-source/historical records | Official sources and cited publishers provide material for accountable research. Earlier analytics and closed briefing records remain described separately in the Privacy Policy. |
Do not provide financial credentials, identity documents, health data, biometric identifiers, precise location or confidential content through the general forms. No such data are required to browse, inquire or reserve.
Recipients and advertising
Vercel provides hosting, request processing, security, cookieless web analytics and private reservation/order storage. Stripe processes checkout, payments, taxes and fraud-prevention information. Resend delivers requested correspondence, order/service emails and newsletter confirmations. Engaged fulfilment and delivery providers receive necessary purchase details; authorized 4SI personnel and advisers handle relevant records. Historical providers are listed in the Privacy Policy.
4SI does not sell public-website personal information, share it for cross-context behavioral advertising, use it for targeted advertising or use sensitive personal information to infer characteristics. Global Privacy Control does not need to be enabled to achieve that treatment here: there is no covered sale, sharing or targeted advertising for this website to stop. If those practices change, required notices and controls must be provided before they begin.
Retention
Swipe or scroll the table to read every column.
| Category | Normal period or criterion |
|---|---|
| Contact, Store, volume and workflow correspondence | Normally up to 24 months; longer only for an active relationship, legal obligation or claim. |
| Presence Key release reservations | Until withdrawal, program closure or replacement by a separately agreed product relationship. Limited acknowledgement, withdrawal and delivery records may remain where needed to document the request, respect an opt-out or protect legal rights. |
| Appearance and audience settings | On your device until changed or cleared; the website does not send these preferences to an analytics service. |
| Store bag and setup | Product, finish and quantity choices remain in session storage for the tab session, until removed or cleared; browser session restoration may preserve them. Inquiry URL/history can retain the selected setup under browser settings. Submitted selections follow the correspondence retention period. |
| Founding Edition purchases | For order processing and fulfilment, ongoing contractual benefits, support, refunds and applicable accounting, tax or other legal duties; relevant records may remain while needed for a claim. Uncompleted checkout records are limited to reconciliation, abuse prevention and resolving related enquiries or disputes. Records are not deleted merely because a checkout or secure link expires. |
| Newsletter choices | Subscription details while subscribed. After withdrawal, only the consent/withdrawal evidence and suppression information needed to respect the opt-out or resolve a legal claim. Necessary purchase records follow their separate criteria. |
| Temporary anti-abuse data | Application rate-limit keys use a window of up to 10 minutes; expired stored keys are removed on later requests. Hosting security logs have separate retention under the provider configuration and operational need. |
| Current web analytics | Aggregate reports are viewable for up to 12 months under our Vercel plan. Vercel discards the request-derived visitor hash after 24 hours. We do not export visitor profiles or join statistics to orders or accounts. |
| Earlier optional analytics | The former notice specified a normal 90-day retention period for raw events and associated pseudonymous network and attribution fields. No new Signal Analytics records are collected by this version of the website. Existing records remain subject to applicable rights and retention limits. |
| Closed briefing subscriptions | Delivery has stopped. Prior subscription data are kept only where still necessary to close the service, handle a request or meet a legal obligation. Minimal suppression data may remain to honor an opt-out. |
| Public-source research archives | While needed for the sourced research record, corrections, version history and methodological accountability, with periodic review for continued necessity. |
| Privacy and legal requests | For handling the request and then only as needed to demonstrate compliance, meet a legal duty or establish, exercise or defend claims. |
State privacy rights
Depending on the law that applies, you may request access, correction, deletion, restriction, a portable copy or other information; object to processing; withdraw consent; appeal a denied request; and exercise applicable opt-out or limitation rights. 4SI does not discriminate against people for exercising an applicable privacy right.
Send a request to contact@by4si.com or the postal address above. Identify the service or record and your jurisdiction. We may request proportionate verification and, for an agent, evidence of authority. Do not send an identity document unless we explain why a particular verification step is necessary and provide an appropriate channel.
Where a state law grants an appeal, a refusal will include an explanation and instructions for appealing. Identify the earlier request when writing to contact@by4si.com. Statutory exceptions may apply; we will explain the basis where required.