Privacy Policy — The Endpoint

Effective date: August 3, 2026

This policy explains what The Endpoint collects, why, who touches it, and what control you have. It is written to be read, not skimmed past. If anything here is unclear, email cristian@cristiankrumbah.com and we will answer plainly.

1. Who we are

The Endpoint Newsletter ("The Endpoint," "we") is published by Cristian Krumbah, based in Renton, WA. We publish analysis on commercial AV integration and workplace technology by email and at cristiankrumbah.com/newsletter.

2. What we collect

Information you provide. Your email address (required to subscribe). Your name, company, or role, if the signup form asks for them or you volunteer them in a reply or survey. The contents of any email you send us.

Information collected automatically. Our publishing platform, Ghost, records the date, time, and IP address of your signup for security and verification, and creates a member record for your subscription; Ghost sets cookies to keep you signed in if you access the site through a sign-in link. When issues are sent — Ghost delivers them through the Mailgun email service — the platform records delivery and engagement events: whether an issue was delivered, whether it was opened, and which links were clicked, along with the IP address, approximate location, and email client involved. Open data is approximate by nature and we treat it that way. On the website, Ghost's analytics record pages visited, referring site, browser and device type, and approximate location.

What we do not collect. No payment information — the newsletter is free. No sensitive personal data. Nothing purchased from data brokers.

3. How we use it

We use this information to send the newsletter you signed up for; to understand readership in aggregate — which topics get read — so the editorial improves; to keep the service secure and prevent abuse; and to comply with legal obligations.

We do not sell or rent your personal information, and we do not share it with advertisers. If The Endpoint ever carries sponsorships, sponsors will receive aggregate statistics only (for example, total subscriber count and aggregate open rate) — never your email address or any individually identifiable data.

4. Who else touches your data

Service providers that operate the newsletter on our behalf: Ghost (Ghost Foundation Ltd), which hosts the website, manages the subscriber list, and processes subscriber data under its Data Processing Agreement (ghost.org/dpa), and Mailgun, the email delivery service Ghost uses to send newsletter issues. They process subscriber data as our service providers and may not use it for their own purposes. Ghost's own privacy policy is at ghost.org/privacy.

We may also disclose information if required by law or legal process, or transfer it as part of a sale, merger, or reorganization of the publication. If that happens, this policy continues to apply to your data, and any material change will be announced in the newsletter before it takes effect.

We rely on your consent to send the newsletter — withdrawable at any time via the unsubscribe link — and on our legitimate interests for analytics, security, and service improvement.

6. How long we keep it

For as long as you are subscribed. If you unsubscribe, your member record remains in Ghost marked as unsubscribed so we never email you again by mistake, and the email delivery service retains standard delivery and suppression logs for a limited period. If you want your member record deleted entirely, email cristian@cristiankrumbah.com and we will complete it within 30 days. Website analytics are retained under Ghost's standard analytics settings.

7. Your rights

Unsubscribe: one click, in the footer of every issue, processed by our email platform without delay.

Access, correction, deletion, portability: email cristian@cristiankrumbah.com. We honor these requests for every reader, regardless of where you live, within 30 days.

EEA/UK readers also have the right to lodge a complaint with your supervisory authority. U.S. readers: we do not sell or share personal information as those terms are defined in U.S. state privacy laws, so there is nothing to opt out of on that front.

8. International transfers

The Endpoint is operated from [the United States], and subscriber data is stored and processed by the providers listed above, which may store it in the European Union, the United States, and other countries under their own transfer safeguards, including standard contractual clauses where required.

9. Children

The Endpoint is written for enterprise technology buyers and is not directed at anyone under 16. If we learn we hold a child's data, we will delete it.

10. Changes to this policy

We will update the effective date above whenever this policy changes, and announce any material change in the newsletter itself before it takes effect.

11. Contact

Cristian Krumbah
PO Box 2770 Renton WA, 98052
cristian@cristiankrumbah.com