Effective Date: January 1, 2026
Last Revised: June 1, 2026
Operator: Paneah LLC
Properties Covered: paolavilla.com, paneah.com, paolavilla.store, Sword Edge (newsletter, YouTube, membership), associated software products, and all related platforms
Contact: support@paneah.com
Overview
Paneah LLC (“Paneah,” “we,” “us,” “our,” or “Company”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and protect it, with whom we share it, and your rights regarding your data.
This Privacy Policy applies to all websites, mobile applications, software products, subscription platforms, newsletters, memberships (including Sword Edge), educational programs, research publications, reports, events, digital products, advisory services, AI-powered tools, and related services operated by Paneah LLC in connection with economist, researcher, educator, and public commentator Paola Villa (collectively, the “Services” or the “Platform”).
By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Services.
For California, Virginia, Colorado, Connecticut, Utah, and GDPR-jurisdiction residents: Additional rights are outlined in the relevant sections below.
1. What Information We Collect
- Voluntarily Submitted Information
When you interact with the Services, you may voluntarily provide:
- Contact information — name, email address, phone number, mailing address
- Account information — username, password, profile details
- Payment information — credit card or payment account details (processed securely through third-party processors; we do not store full card numbers)
- Professional information — business name, industry, role, company size, professional context
- Communications — emails, messages, support inquiries, testimonials, feedback
- Booking and consultation data — session questions, situational context, scheduling preferences
- Survey responses and form submissions
- Information submitted through forms, applications, courses, events, communities, newsletters, or membership sign-ups
You are never required to provide personal information to access general educational content available to the public. Providing such information is your choice, and you can control how we use it (see “Your Rights and Choices” below).
- Automatically Collected Information
When you visit the Services, we automatically collect:
- Device information — device type, operating system, browser type and version
- Usage data — pages visited, content viewed, time spent, links clicked, referral sources, session duration
- Location data — general geographic location (not precise GPS) based on IP address
- Cookie and tracking identifiers — small files that recognize your device and remember preferences
- Information from Third Parties
We may receive information from payment processors, analytics providers, email marketing platforms, advertising networks, social media platforms, booking systems, business partners, public sources, and other third parties consistent with applicable law and their respective privacy policies.
- Information Processed Through Software Products and AI-Powered Tools
Paneah develops and offers software products, dashboards, intelligence platforms, and AI-powered research tools. When you use these products, we may process additional information including:
- Queries, inputs, prompts, and search terms you submit to the platform
- Usage logs and feature interaction data
- Configuration choices, saved views, and preferences
- Data you upload, import, or connect through integrations
This information is processed to deliver the requested outputs, improve product functionality, ensure security, detect misuse, and enhance user experience. See “Artificial Intelligence and Software Services” below for additional terms specific to AI-enabled products.
2. Cookies and Tracking Technologies
Like many websites, we use cookies, pixels, web beacons, software development kits, and similar tracking technologies (collectively, “Cookies”) to record your preferences, track usage, and improve the Services.
Cookies on our sites are generally divided into the following categories:
Cookie Type | Purpose |
Essential | Required for the website to function. Enables core features such as logging in, account access, security, and navigating between pages. Cannot be disabled. |
Functional | Remember your preferences and personalize your experience — language, region, saved settings, and similar conveniences across visits. |
Analytics | Help us understand how visitors interact with our site so we can improve content, performance, and design. Includes Google Analytics and similar services. |
Advertising | Used to deliver advertising relevant to your interests and measure campaign effectiveness. May involve third-party advertising networks. We will only place these cookies with your consent where required by law. |
When you first visit our site, a banner informs you of the use of Cookies and seeks your consent where required by law. You may manage Cookie preferences through the banner controls or your browser settings at any time. Disabling certain Cookies may limit functionality.
Do Not Track
Some browsers offer a “Do Not Track” feature. Currently, we do not specifically respond to Do Not Track signals, but we respect the privacy choices outlined in this Policy and honor universal opt-out signals such as Global Privacy Control where required by applicable law.
3. How We Use Your Information
Service Delivery
- Creating and managing your account
- Delivering products, services, and content you purchase or request
- Processing payments and issuing refunds
- Responding to inquiries and support requests
- Sending transactional emails (order confirmations, password resets, scheduling notifications)
- Facilitating advisory session bookings and communications
Improvement and Analytics
- Understanding how you use the Services
- Identifying usage patterns and trends
- Improving Platform functionality and user experience
- Troubleshooting technical issues
- Developing new products and features
- Conducting research, analysis, and product development
Marketing and Communications
- Sending promotional emails about products and services (only if you opt in)
- Sharing information about updates, webinars, events, and new offerings
- Personalizing content recommendations
- Conducting surveys and gathering feedback
You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at support@paneah.com.
Legal and Security
- Complying with legal obligations and regulatory requirements
- Protecting against fraud, unauthorized access, and misuse
- Enforcing our Terms of Service and other agreements
- Responding to government requests and legal process
- Protecting the rights, privacy, and safety of our users, the public, and Paneah
4. Artificial Intelligence and Software Services
Certain Paneah products and services use artificial intelligence technologies, automated data processing, third-party APIs (including financial data APIs such as those provided by the Federal Reserve and other public and licensed data sources), and machine learning systems.
Information you submit to AI-enabled and software-enabled products may be processed to:
- Generate the requested outputs, analyses, or visualizations
- Improve functionality and performance
- Detect misuse, fraud, or security threats
- Maintain audit trails for compliance purposes
- Enhance user experience and product quality
Important: You should not submit confidential, proprietary, regulated, or highly sensitive personal information through AI-enabled services unless explicitly authorized to do so under a separate written agreement.
Paneah uses third-party AI providers and infrastructure vendors who may process your data on our behalf under contractual confidentiality and data protection obligations. We do not authorize these providers to use your data to train their general-purpose AI models except as required to provide the service to us.
Outputs generated through AI-enabled and software-enabled products are provided for informational and educational purposes only. They do not constitute legal, financial, investment, tax, or other professional advice. See our Terms of Service and Earnings Disclaimer for additional limitations.
5. Email Communications and Permission-Based Marketing
Paneah relies exclusively on permission-based email marketing. We do not purchase, rent, scrape, or use unsolicited contact lists. We do not engage in cold-email outreach to non-consenting recipients.
You may receive emails from us only when you have:
- Subscribed to the Sword Edge newsletter or another Paneah communication channel
- Created an account or completed a purchase through our Services
- Registered for an event, webinar, course, or membership
- Downloaded a resource, lead magnet, or report
- Booked an advisory session or consultation
- Joined a waitlist for an upcoming product (such as the Sword Edge membership)
- Explicitly opted in through a sign-up form or checkbox
Every marketing email includes a clear, functional unsubscribe mechanism. Transactional and account-related communications may still be sent as necessary.
We comply with applicable email marketing laws including the CAN-SPAM Act (United States), the General Data Protection Regulation (GDPR) (European Union), and the Canadian Anti-Spam Legislation (CASL).
6. Legal Basis for Processing (GDPR and Similar Laws)
For residents of GDPR jurisdictions and similar privacy regimes, we process personal data on the following lawful bases:
- Contract — processing necessary to fulfill your agreement with us
- Consent — you have explicitly consented to the processing (e.g., opting in to newsletters)
- Legitimate Interests — a legitimate business interest that does not override your rights (e.g., fraud prevention, service improvement, direct marketing where legally permitted)
- Legal Obligation — processing required by law
7. With Whom We Share Information
Service Providers and Vendors
We share information with third-party vendors who provide services such as email delivery, payment processing, cloud hosting, analytics, AI infrastructure, scheduling software, customer support, and data storage. These vendors are contractually bound to use your information only as necessary to provide their services and to maintain confidentiality.
Business Transfers
If Paneah LLC is acquired, merged, restructured, or substantially liquidated, personal information may be transferred as part of that transaction. You will be notified of any such change and any choices you may have.
Legal Requirements
We may disclose information when required by law, court order, subpoena, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of Paneah, our users, or the public.
Affiliates and Related Entities
We may share information among Paneah’s family of companies, current and future subsidiaries, and operationally related entities (including Harvest Feed for clearly delineated purposes when expressly disclosed) for customer service, account management, and product improvement.
Public Content
If you post content publicly on our Platform — including comments, testimonials, community posts, or social media interactions tied to the Services — that content is no longer private. Paneah does not control how third parties may use publicly posted content.
What We Do Not Do
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Mobile phone and text messaging information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party.
8. Data Retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it in accordance with applicable law and our internal retention policies.
9. Security
We implement industry-standard security measures to protect your information, including:
- SSL/TLS encryption for data in transit
- Secure password storage using current cryptographic standards
- Access controls and authentication
- Regular security assessments and updates
- Restricted employee and contractor access to personal information on a need-to-know basis
- Incident response and management procedures
No security system is 100% secure. While we maintain reasonable safeguards, we cannot guarantee absolute protection against unauthorized access, loss, or misuse. Use of the Platform is at your own risk. Except for our duty to maintain reasonable security under applicable law, we disclaim any other liability for unauthorized access to or loss of information.
10. Your Rights and Choices
Email Communications
If you have opted in to receive marketing emails, you can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting support@paneah.com. Transactional emails cannot be unsubscribed from without closing your account.
Account Access and Control
You may access, update, or delete account information by logging into your account or contacting us at support@paneah.com.
California Residents (CCPA / CPRA)
If you are a California resident, you have the following rights:
- Access — request what personal information we collect, the sources, purposes, and categories of third parties with whom we share it
- Deletion — request deletion of your personal information, subject to legal exceptions such as fraud prevention or legal compliance
- Correction — request correction of inaccurate personal information
- Opt out of sale or sharing for targeted advertising (we do not sell personal information)
- Limit use of sensitive personal information
- Non-discrimination — we will not treat you differently for exercising your rights
To exercise these rights, contact support@paneah.com and provide proof of identity. We will respond within 45 days as required by law.
Virginia, Colorado, Connecticut, Utah Residents
If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have rights similar to those described above, including the right to access, correct, delete, and obtain portability of your personal information, as well as the right to opt out of targeted advertising. You also have the right to appeal a denial of your privacy rights. Contact support@paneah.com to exercise these rights.
GDPR Jurisdictions (EU/EEA, United Kingdom, Switzerland)
If you are in a GDPR jurisdiction, you have the following rights:
- Access — request a copy of your personal data
- Correction — request correction of inaccurate data
- Deletion — request deletion (right to be forgotten)
- Restriction — request restriction of processing
- Portability — request transfer of your data to another organization
- Objection — object to processing for direct marketing or legitimate interests
- Withdraw Consent — withdraw consent to processing at any time
To exercise these rights, contact support@paneah.com. We will respond within 30 days. You also have the right to lodge a complaint with your data protection authority.
Authorized Agents
You may authorize someone to make a privacy rights request on your behalf. Authorized agents must demonstrate authorization or have power of attorney. We may request confirmation directly from you that the agent is authorized.
11. International Data Transfers
Paneah operates primarily in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to the transfer of your information to the United States.
For GDPR-jurisdiction users: When we transfer data outside the GDPR jurisdictions, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses to ensure adequate protection of your data.
12. Children’s Privacy
The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided information, we will delete it promptly. If you believe a child has submitted information to our Services, please contact support@paneah.com.
13. Third-Party Links and Social Media
The Services may contain links to third-party websites, apps, social media platforms, payment processors, scheduling tools, and other external services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.
We maintain a presence on social media platforms including but not limited to YouTube, Instagram, X, TikTok, LinkedIn, and Facebook. These platforms have their own privacy policies governing how they collect and use data when you interact with our presence on them.
14. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Changes become effective when posted. We will notify you of material changes by email or prominent notice on the Platform. Continued use of the Services after notification constitutes acceptance of the updated Policy.
15. Contact Us
Paneah LLC
Email: support@paneah.com
Location: Atlanta, Georgia, United States
Mailing address provided upon written request to the email above.
We will respond to all verified requests without undue delay and in accordance with applicable law.