Privacy Policy

Last updated: 8 October 2026

The Shift, operated by Marcus Baker, Inc. ("we"), asks you for unusually personal information — childhood memories, the beliefs you carry, what is weighing on you, people you've lost. This policy explains plainly what happens to it.

The short version: your intake is used to build your sessions and nothing else. It is never sold. It is never used for advertising. It is never shared with anyone except the specific service providers needed to create and deliver your recordings. You can have it deleted at any time.

What is collected

Identity and contact: name, email, optional phone.
Intake and request responses: your chosen focus area or situation, the belief you want to change or what is coming up for you, how you feel it in your body, its origin, the people involved, contradicting evidence from your life, sensory preferences, and your safety screening answers. Weekly subscribers submit a new request each week.
Payment: handled entirely by Stripe. Full card numbers are never seen or stored by us — only the last four digits, card brand, subscription and billing status.
Usage: which sessions were sent, and anything you log about listening.
Free guide: your name and email if you request the free guide.

Sensitive information

Your intake will often contain sensitive personal information, including details touching on mental and emotional health. You provide it voluntarily and consent to its use for building your sessions. Because The Shift is not a licensed healthcare provider, this information is not protected health information under HIPAA, and legal therapist–client privilege does not apply. It is still treated as confidential under this policy.

How it is used

To review your intake and decide whether The Shift is appropriate for you
To generate, record, and deliver your personalised sessions
To process payment, including recurring Weekly Session payments, and to confirm that a weekly subscription is active when you make a request
To schedule contact with you where you book a call
To respond when you contact us
To meet legal obligations
To send you the free guide and, if you ask for them, occasional emails about The Shift. Every marketing email has an unsubscribe link, and you can unsubscribe at any time.

Not used for: advertising, profiling, resale, or training publicly available AI models on your personal content.

Service providers

These providers process data strictly to deliver The Shift:

Provider	Purpose	What it receives
Stripe	Payments, subscriptions, billing portal	Name, email, payment details
Supabase	Database	Intake responses, account records
Cloudflare	Application processing	Site traffic, request data
Vercel	Website hosting	Site traffic, request data
Anthropic	Session drafting	Intake responses, no name or contact details
ElevenLabs	Voice rendering	Finished session text
Cloudinary	Audio hosting	Your recordings
Resend	Email	Name, email, session links
Kajabi	Free guide delivery and email list	Name, email
Google Calendar	Scheduling calls	Name, email, booking details

Your data may also be disclosed where required by law, or where there is a genuine belief it is necessary to prevent serious harm to you or someone else.

How long it is kept

Intake and request responses: while you are active (including while a Weekly Session subscription continues), then 12 months (so a later session can build on earlier work) unless you ask for deletion sooner.
Recordings: 12 months after your final session, so you can keep listening.
Payment records: 7 years, as tax and accounting law requires.
Free guide email list: until you unsubscribe or ask us to delete it.

Your rights

You may request access to your data, correction, deletion, a portable copy, or restriction of processing, and you may withdraw consent. Email marcus@theshift.energy and we will respond within 30 days.

Deletion removes your intake, session scripts, and recordings permanently. Payment records are retained where law requires. If you are in California, the EEA, or the UK, you have additional statutory rights, including the right to complain to your data protection authority — and we will not discriminate against you for exercising them.

Security

Data is encrypted in transit and at rest. Database access is restricted to the application and to Marcus. Payment data never touches our servers. No system is perfectly secure, but the amount of personal history in an intake is taken seriously; if a breach affects your data, you will be notified without undue delay.

Other

Cookies: only what's needed to make the site and checkout work. No advertising or third-party tracking cookies.

Children: The Shift is for adults 18+. Information from minors is not knowingly collected; if we learn we have, it is deleted.

International: data is processed in the United States. Enrolling from elsewhere means consenting to that transfer.

Changes: material changes will be emailed to active clients and subscribers.