Privacy Policy

Last Updated: November 4, 2026

This Privacy Policy explains what Six Sigma Center (sixsigmacenter.com) collects, why, who it is shared with, how long it is kept, and how you can see, change or delete it. Six Sigma Center is run by one person, Fred Stevens, so "I" in this policy means me.

1. Information I Collect

Information you give me

• Account details: your email address and, if you add them, your name and organization.
• Files and studies: the data files you upload and the analyses, saved setups and reports you create.
• Subscription details: your plan, billing status and payment history. Card numbers go directly to Stripe and never reach me.
• Messages: what you write to me by email or the contact form, and questions you ask the built-in assistants.
• Assistant connections: if you connect an outside AI assistant, the approval, its connection keys and a record of the studies it runs (see section 5).

Information collected automatically

• Browser type and version, device type and operating system.
• IP address and the approximate location it suggests, used for security and abuse limits.
• Pages visited and features used, counted without advertising identifiers.
• Cookies and browser storage that keep you signed in and remember your cookie choices (see the Cookie Policy).

2. Signing In With Google or Microsoft

You can create an account or sign in with "Continue with Google" or "Continue with Microsoft" instead of a password. If you do, I ask only for the basic sign-in permissions: openid, email and profile. I do not ask for access to your Gmail, Google Drive, Calendar, Contacts or any other Google or Microsoft service.

What I receive

• Email address and whether the provider has verified it.
• Name and profile picture, as set in your Google or Microsoft account.
• Account ID, a number the provider uses to recognize you. It is not your password. I never see your password.

How I use it

• To create your account, sign you in, and keep your account secure.
• To show your name and picture in your account menu.
• To send you account, security and billing emails at that address.

What I never do with it

• I never sell it, rent it or share it with advertisers or data brokers.
• I never use it for advertising or to build advertising profiles.
• I never use it to train AI models.
• No person reads it except me, when you ask for support or to investigate a security problem, or where the law requires it.

Sharing, storage and deletion

Your sign-in details are stored by my hosting and sign-in provider (listed in section 4), which processes them only on my instructions. They are kept while your account exists and deleted within 30 days of your request to close your account. You can also remove Six Sigma Center’s access at any time at https://myaccount.google.com/permissions (Google) or https://myaccount.microsoft.com (Microsoft). Removing access stops future sign-ins with that account. It does not delete data already in your Six Sigma Center account; email me for that.

Google API Services User Data Policy

Six Sigma Center's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can read that policy at https://developers.google.com/terms/api-services-user-data-policy.

3. How I Use Your Information

• Running the service: calculating your analyses, saving your studies, creating your reports.
• Your account and plan: sign-in, subscriptions, plan limits and support.
• Communication: account, security and billing emails, and the newsletter only if you subscribe. Every newsletter has an unsubscribe link.
• Improving the site: counting which pages and features are used, without advertising identifiers.
• Security: detecting fraud, abuse and unauthorized access.
• Connected assistants: letting an assistant you approve run studies within your plan, keeping a traceable record of each one, and letting you end its access.

I do not sell your personal information. The only advertising measurement is the Google Ads sign-up measurement described in section 4; you can opt out of it with "Reject All" in the cookie banner or a Global Privacy Control signal.

4. Who I Share It With

I share information only with the service providers below, only what each needs to do its job, and only on my instructions. Each is bound by its own privacy and security terms.

• Hosting, storage and sign-in (Lovable Cloud): stores your account, files, studies and reports, and handles sign-in.
• Google and Microsoft: only if you choose to sign in with them, as described in section 2.
• Stripe: takes payments and manages subscriptions. Stripe handles card details under PCI DSS; I never store them.
• Resend: delivers account, security, billing and newsletter emails to your address.
• AI providers (OpenAI and Google Gemini, through the Lovable AI Gateway): answer questions you ask the built-in assistants and turn replies into speech. The assistants built into this site send your question and the relevant study details to an outside AI service to write a reply, and to turn replies into speech when you use voice. The numbers in your studies are always calculated by this platform, never by that service.
• Google Ads: I advertise on Google Search. To learn whether my ads lead to sign-ups, this site loads the Google Ads tag and tells Google when an account is created. Google uses this, with its own cookies, to measure ad results under its privacy policy (https://business.safety.google/privacy/). This site never sends Google your name, email, files or studies. The tag does not load for visitors in the EU, EEA, UK, Switzerland or Canada, or for anyone who chooses "Reject All" in the cookie banner or uses a Global Privacy Control browser signal.
• When the law requires it: to answer a valid legal request, or to protect the rights and safety of users and the service.

5. AI Assistants You Connect

You can approve an outside AI assistant, such as ChatGPT or Claude, to run studies in your account on your behalf. If you do:

• The assistant can only reach your own account, and only the data you send it in a request.
• Any study it produces is saved in your account, exactly like one you ran yourself.
• It can read back your own finished studies. It can never see another person’s.
• You can see every assistant you have approved, and end its access, in your account settings. Access stops immediately.
• Anything you send to a connected assistant is also handled under that assistant provider’s own privacy terms, which I do not control.

Records kept when you connect an assistant

• A one-time approval code created when you approve an assistant, stored only in scrambled form. To confirm that the assistant asking for access is the one you approved. No person can read it. Only the sign-in service uses it, once. It expires within minutes and is removed when you delete your account.
• The connection keys an approved assistant uses, stored only in scrambled form, with when they were last used. To let the assistant act as you, within your plan, until you end its access. No person can read the keys themselves. They stop working the moment you end the assistant’s access or they expire, and are removed when you delete your account.
• Which assistant you approved, what it may do, and when you approved or withdrew it. So you can see every assistant you have approved and end its access. You, and me for support and security review. Kept while your account exists, so you have a record of past approvals. Removed when you delete your account.
• Multi-step reviews an assistant asked the platform to run: the request, each step’s result, and why any step stopped. To run the review and let you or the assistant read the finished result. You, and me for support. Kept while your account exists. Removed when you delete your account.
• A record of each study: which method and version calculated it, a fingerprint of the data used, and the row count. So any result can be traced back to exactly how it was calculated. You, and me for support. Kept while your account exists, like your studies. Removed when you delete your account.
• One line per analysis request: which module, your plan, whether it ran or was refused and why, and whether it came from the app or an assistant. To apply your plan’s limits the same way for you and for assistants acting for you. Me only, for billing and abuse prevention. You see the effect as your plan usage. Kept while your account exists. Removed when you delete your account.
• Milestones in connecting an assistant, such as first approval and first study, each recorded once. To find where connecting an assistant goes wrong so I can fix it. You, and me. Kept while your account exists. Removed when you delete your account.

6. Cookies, Measurement and Your Choices

Necessary cookies and browser storage keep you signed in and remember your choices; the site cannot work without them. Optional measurement runs only after you accept it in the cookie banner, and you can change that choice at any time from the Cookie Policy page. Outside the EU, EEA, UK, Switzerland and Canada, the site loads the Google Ads tag to measure whether ads lead to sign-ups (section 4). Choosing "Reject All", or a Global Privacy Control browser signal, stops it from loading on your next page view; no other advertising tags are used.

To limit Google ad personalization generally, visit https://adssettings.google.com.

7. Security and Data Retention

• Data is encrypted in transit and at rest.
• Access rules let each account read only its own data.
• Data is backed up automatically.

Six Sigma Center is built in alignment with SOC 2 principles and the other frameworks named on the Compliance page. It is not certified or audited against any of them.

I keep personal information only as long as your account exists or the law requires. When you ask me to close your account, I delete your account, files, studies, reports and sign-in details within 30 days. Billing records are kept for as long as tax and accounting law requires (usually seven years), and backups roll off within 30 days after that.

Ending an assistant’s access stops it at once and keeps your studies. Deleting your account removes every connector record listed above together with the account.

8. Your Privacy Rights

Wherever you live, you can ask me to show, correct, export or delete your personal information, or to stop a particular use of it. Email privacy@sixsigmacenter.com with "Data Request" in the subject line. I will confirm it is you and reply within 30 days.

Under GDPR and UK GDPR

• Access, correction, deletion, portability, restriction and objection. You may also complain to your local data protection authority.
• Legal bases: providing the service you signed up for (contract); security and improving the site (legitimate interests); optional measurement and newsletters (consent, which you can withdraw); and keeping billing records (legal obligation).

Under the CCPA (California)

• The right to know what I collect and how it is used, to delete it, to correct it, and not to be treated differently for using these rights.
• I do not sell or share personal information as those words are defined in the CCPA.

9. Children

Six Sigma Center is a professional tool and is not meant for anyone under 16. I do not knowingly collect information from children. If I learn that I have, I delete it.

10. International Transfers

Your information may be processed in the United States and other countries where my service providers operate. Where the law requires it, transfers are covered by the European Commission’s standard contractual clauses or an equivalent safeguard.

11. Contact

• Email: privacy@sixsigmacenter.com
• Mail: Six Sigma Center, LLC, Atlanta, GA 30309, USA

12. Changes to This Policy

This policy was last updated on November 4, 2026. If I make a significant change, I will tell account holders by email or on the site before it takes effect.