Privacy policy

Updated October 30, 2026

Virtual Focus Groups is run by Sunday Night AI, LLC (“we”). This page covers what we collect when you use virtualfocusgroups.com, why, and who else sees it. The short version: we collect what we need to sell you a plan and run your sessions, and nothing for advertising.

What we collect

• Your email address, entered at checkout or in the “Get a new link” form. We use it to send your sign-in links.
• Google sign-in. If you choose “Continue with Google,” Google tells us your verified email address and nothing else (no name, photo or contacts). We use it only to find your purchase and sign you in; we don't store it beyond your sign-in cookie.
• Payment details. Stripe collects these on its own checkout page. We never see or store your card number. Stripe tells us what you bought, when, and the email and billing details you entered.
• Your briefs and sessions. What you enter when you set up a session (what you want to learn, what you're testing, who it's for, your hunch and any notes), any files you upload (images, PDFs or a brief), the panel and discussion guide we preview for you, and the session the panel produces. Please don't put other people's personal information, or anything confidential you can't share, into a brief or upload.
• Technical logs. Our host, Vercel, records standard request data such as IP address, browser type, and pages requested, so the site runs and stays secure.
• Usage analytics. PostHog counts which pages are viewed and which buttons and links are clicked, with your browser type, rough location and the site you came from. It doesn't set cookies or store anything in your browser, so it can't recognize you on a later visit, and it never records what you type or your screen.

We don't run ad trackers, and we don't buy data about you from anyone.

How we use it

• To take payment and give you access to what you bought.
• To run your sessions and show you their findings.
• To send sign-in links and messages about your purchase.
• To keep the site working and stop abuse.
• To see how people use the site so we can improve it.

We don't send marketing email. If we start, we'll ask first, and every message will have an unsubscribe link.

Who else sees it

We use these service providers, who handle your data on our behalf:

• Stripe processes payments (Stripe privacy policy).
• Google handles “Continue with Google” sign-in, if you use it (Google privacy policy).
• Resend delivers our emails (Resend privacy policy).
• Vercel hosts the site (Vercel privacy policy).
• Neon hosts the database that stores your sessions (Neon privacy policy).
• PostHog measures site usage (PostHog privacy policy).
• Vercel Blob stores files you upload (Vercel privacy policy).
• OpenRouter and Anthropic run the AI moderator and panelists (OpenRouter privacy policy, Anthropic privacy policy). Your brief, uploads and guide are sent to the model to generate the preview and session. Neither uses API traffic to train models.

We don't sell your personal information or share it for targeted advertising. We may disclose it if the law requires us to.

Cookies and browser storage

We use two cookies and a few browser-storage settings, all needed for the site to work:

• vfg_access cookie. Keeps you signed in for 30 days. It holds your email, your plan, and a signature so it can't be forged.
• vfg_oauth cookie. Lasts up to 10 minutes during Google sign-in, to check that the reply really comes from the sign-in you started. Deleted as soon as you're back.
• Cookie-notice setting. Remembers that you closed the cookie notice.
• Demo setting. Remembers whether you turned off auto zoom in the demo room.
• Session draft. Keeps a session you're setting up, in your browser only, until you start it.

None of these track you across other sites, and our analytics adds no cookies or storage of its own. Stripe's checkout page, on Stripe's own domain, sets its own cookies for fraud prevention; see Stripe's policy for those.

How long we keep it

If you preview a panel and don't run a session, we delete that brief, its uploads and the preview 30 days after you made it. Sessions you pay for, and their briefs and uploads, stay in our database until you ask us to delete them. To delete a session or everything tied to your email, write to derek@sundaynight.ai from that address and we'll remove it within 7 days. Stripe keeps payment records as required for tax and accounting.

Your rights

You can ask us to show you, correct, or delete the personal information we hold about you, or to stop using it. Email derek@sundaynight.ai and we'll reply within 30 days. We won't treat you differently for asking.

California residents have the right to know, delete, and correct personal information, and to opt out of its sale or sharing. We don't sell or share it, so there's nothing to opt out of.

EU and UK residents: we process your data to perform our contract with you (your purchase) and for our legitimate interest in running a secure site. Our providers are based in the United States, so your data is processed there. You can also complain to your local data protection authority.

Children

The site isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top. Big changes get an email to customers.

Contact

Sunday Night AI, LLC · derek@sundaynight.ai