Skip to main content

Privacy Policy — Outgrow the Script

Last updated: November 13, 2026

Who we are, and who to contact.

Outgrow the Script is the business name under which Arron Burnett operates as a sole proprietor. If you have a question about your personal information, or want to ask for access, a correction, or deletion, contact Arron Burnett at arron@arronburnett.com. Our mailing address is:

Outgrow the Script
#503-7700 Hurontario St
Unit 567
Brampton, ON L6Y 4M3
Canada

What this policy covers.

This policy describes the information collected when you visit arronburnett.com, take the free Autopilot Audit, receive follow-up emails, or join the Outgrow the Script Movement. Some of those activities happen on other platforms — Tally, Make, Sender, and Skool — which have their own privacy policies, linked below. What they collect is governed by them as well as by this policy.

Who this is for — adults 18 and over

The Autopilot Audit and the Outgrow the Script Movement are intended for adults aged 18 and over. By taking the audit or joining the community, you confirm that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not take the audit, provide your email address, or join the community. If we learn that we have collected personal information from someone under 18, we will delete it. We do not verify your age — this is a statement you make by using the service, not a technical age check.

Your Becoming Snapshot is not an email

When you finish the Autopilot Audit, your Becoming Snapshot is shown to you on screen at the end of the audit. You see it whether or not you agree to receive emails. The Snapshot is a result page, not a message sent to you, and taking the audit does not subscribe you to anything.

Marketing emails are separate and optional

The follow-up emails are a separate, optional thing. On the final page of the audit, after your Snapshot is ready, you are asked for your first name and email address and shown an optional checkbox, unticked by default, reading exactly:

"Yes, I'd like to receive three follow-up emails from Arron Burnett (arron@arronburnett.com) about my Autopilot Audit result: one now, one in two days, and one four days after submitting. I can unsubscribe at any time."

Ticking that box is the only way you are added to the email list. If you do not tick it, you still see your Snapshot, and you receive no emails from us. If you do tick it, you receive three emails for your Becoming type: one immediately, one two days later, and one two days after that. Every email contains an unsubscribe link. The emails are sent by Arron Burnett, from arron@arronburnett.com. The audit also carries this disclaimer, shown on the form: "The Autopilot Audit is a self-reflection tool for personal development. It is not a clinical assessment, diagnosis, counselling, therapy, or medical advice." Your responses are used only to generate your Becoming Snapshot and, if you consented, to send your follow-up emails.

How consent-false is enforced: if the box is not ticked, no marketing subscriber is created. Controlled tests verified that unchecked-consent submissions are blocked before any subscriber is created — no subscriber record is made and no email is sent.

What we collect

From the Autopilot Audit (Tally). When you take the audit, we collect: your first name and email address (both required to show you your Snapshot); your answers to the audit questions (up to 12 questions), the scores calculated from them, and your resulting Becoming type (Searcher, Inheritor, Restarter, or Juggler); and whether you ticked the optional marketing-consent box. The audit form is provided by Tally (tally.so). When you submit the audit, your answers are sent from Tally to our automation service (Make) by a webhook, so that your result can be delivered by email if you consented.

From the follow-up emails (Sender). If you consented, your first name, email address, and Becoming type are stored in Sender, in one of four subscriber groups (one for each Becoming type: Searcher, Inheritor, Restarter, or Juggler). Sender records when a subscriber was created and their current status (for example, active or unsubscribed). Sender does not record your consent: its subscriber record has no field for consent, its source, or its wording. The only durable, timestamped evidence of your consent is the stored Tally submission (see "How your consent is evidenced and kept" below).

From the website itself. Our website is hosted on shared hosting (web-hosting.com). The site does not use Google Analytics — the Google Analytics ID field is empty in the site settings — and there is no evidence Matomo is used on the site. The site has no cookie banner. The website has three contact forms (on the Becoming Snapshot, Autopilot Audit, and Community pages). Each form collects your name, email address, and message — the Snapshot and Audit forms also ask for a company name — plus a privacy-consent checkbox and a captcha response. When you submit a form, it is addressed to Arron Burnett at arron@arronburnett.com. How long form submissions are kept is not stated by the form system, so we do not claim a retention period we cannot verify. You can also reach Arron directly by email at arron@arronburnett.com — the site offers an "Email Arron" option as an alternative to the forms. The site has no shop and no payment processing.

From the Outgrow the Script Movement (Skool). The community lives on Skool (skool.com) and is for adults aged 18 and over. Joining requires a Skool account, and anything you do inside Skool — including joining the community and taking part in the 3-Day Becoming Reset — is governed by Skool's own terms and privacy policy as well as this one. We do not receive your Skool password or payment details. We receive personal information from Skool only if you join the community (via the link in the emails) — community profile data.

How your consent is evidenced and kept

Your marketing consent is evidenced by the stored Tally submission: the submission record shows the consent box as ticked and carries the submission timestamp, together with the exact wording quoted above. That submission is the durable record of your consent. It is kept by Tally until it is deleted; deleted submissions leave Tally's backups within 90 days.

The same consent information also passes through Make (the automation service) in the webhook bundle, but only in Make's temporary execution history. Make's execution history is temporary (days to weeks); the exact retention period for this account is not stated here. The durable consent record is the Tally submission.

Sender does not record your consent at all; it records only that you were added, when, and your current status.

How email opens and clicks are recorded

When we send the follow-up emails, Sender records opens using an invisible tracking pixel in each email: an open is registered when your email client loads the pixel. Opens are approximate — they are not recorded if you read email with images disabled or in a plain-text client, and Apple Mail's privacy protection can inflate them by loading pixels automatically. Clicks are recorded per link, with the time of each click. Links in the emails also carry standard tracking parameters.

Where your information goes

Your information is processed by the services named in this policy, in this order. A person who takes the audit has their answers stored in the European Union by Tally, processed in the United States by Make (our Make account is in the US data zone, us2), then stored by Sender (an EU-based provider), and — if they join the community — processed in the United States by Skool.

Sender data location — stated carefully: Sender's pricing page claims "Data Residency (EU)". That claim is not stated in Sender's own privacy policy. This policy therefore does not assert a specific Sender data-centre country.

AI processing: the Tally → Make → Sender flow as built contains no AI processing step — no AI module exists in the Make scenario. This policy says only what is verified: the audit flow itself contains no AI step.

Security and access

Access to your information is limited to Arron Burnett, who is the sole user of the Tally, Make, and Sender accounts used for this system. Passwords and API tokens are stored in the platforms' own secure storage (for example, the Sender token lives only in Make's connection manager) and are never written in documents or chat. Data is transferred over encrypted connections (HTTPS/TLS); the website's SSL certificate is active. Tally encrypts form data in transit and at rest and stores it in Europe, and says it will inform affected people of a breach without undue delay. Make secures network communication with TLS 1.2/1.3 (AES-256), uses full-disk AES-256 encryption, and operates under SOC 2 Type II, SOC 3, and ISO 27001 certification. Sender uses TLS and restricts access to personal information to staff who need it for a specific job; Sender states it cannot ensure or warrant the security of information transmitted to its services. Skool uses encryption where possible and limits access by access controls and confidentiality commitments, and states no website or transmission can guarantee security. No security certification is claimed for Tally, Sender, or Skool.

Two-factor authentication is offered by Tally, Make, and Sender. This policy describes two-factor authentication as offered, not as enabled on any particular account.

How long we keep your information

Audit answers (Tally): kept until deleted. If you ask for deletion, the submission is deleted and leaves Tally's backups within 90 days. There is no automatic expiry on the free plan.

Automation history (Make): temporary only — the webhook bundle carrying your answers and consent lives in Make's execution history for days to weeks. No exact period is stated here.

Subscriber records (Sender) and community data (Skool): kept only as long as needed to provide the emails or the community, and deleted on request. Neither provider publishes a fixed retention period, so no number is stated here.

Your choices, and what happens when you ask for deletion

Consent is optional. The marketing-consent box on the audit is optional and unticked by default. You can take the audit and see your Snapshot without consenting to emails.

Unsubscribe at any time. Every email we send contains an unsubscribe link. Clicking it stops the emails. Unsubscribing does not delete your audit result from your own view, and it does not stop you using the website or the community. Unsubscribe confirmation is OFF in the Sender account, consistent with one-click unsubscribe.

Ask for access, correction, or deletion. Email arron@arronburnett.com. We will confirm once it is done. When you ask for deletion, we remove your audit responses and other unnecessary information, subject to applicable requirements: your Tally submission is deleted, your Sender subscriber record is deleted from the account and cannot be restored from inside Sender (Sender support can recover a removed contact only if you know the exact date it was deleted), and your information in Make's temporary history expires. Two things are kept back, and only those: any records we are legally required to retain, and the minimum restricted suppression information reasonably necessary to prevent accidental marketing re-enrollment — your email address and the fact that you unsubscribed or asked for deletion — kept in a separate private record for that sole purpose. It is never used for marketing, and it is not a Sender feature: Sender has no standalone suppression list; Sender's suppression works only while the subscriber record exists (through its Unsubscribed status), so deleting that record would otherwise erase the evidence of your opt-out. The suppression record is maintained by hand: we check Sender for new unsubscribes and deletion requests twice a week (and immediately when a deletion is requested) and record them ourselves. There is no automatic transfer from Sender to the suppression record. We never automatically reactivate an unsubscribed contact merely because they retake the audit. If you retake the audit and tick the consent box again, that does not automatically remove the suppression record or add you back to the email list. Your case is flagged for a manual review, and the record is cleared only through a separate procedure that checks your renewed consent, Sender's resubscription requirements, and any legal obligations.

There is no subscriber-facing deletion mechanism in Sender (no self-serve deletion form was observed); the deletion route is the admin Delete action, or a request by email reply to arron@arronburnett.com.

We do not sell, rent, or share your personal information with third parties for their own marketing. The services that process your information on our behalf are Tally, Make, Sender, and Skool. Each processes only what it needs to do its job.

Changes to this policy

If this policy changes in a way that affects how your information is used, we will update this page and note the date of the change here.

Last updated: November 13, 2026