Privacy Policy

1. Information We Collect

1.1 Information you provide

• Identity and contact: name, email address, phone number, postal address, time zone, social handles.
• Account credentials: username and password (or third-party login identifiers) for accessing the Course or community.
• Order information: products or services purchased, billing address, transaction history, currency.
• Payment information: processed by our payment processor (e.g., Stripe). We do not store full payment card numbers on our systems; we receive a tokenized reference and limited details (such as last four digits, brand, and expiry).
• Coaching and consult information: notes, questionnaires, store URLs, ad screenshots, supplier names, product ideas, business goals, and any other materials you voluntarily share.
• Communications: messages, emails, support tickets, community posts, and call recordings or transcripts (where lawful and disclosed in advance).
• Marketing preferences: consents and opt-outs.

1.2 Information collected automatically

• Device and technical: IP address, browser type and version, operating system, device identifiers, language, referring URL, pages viewed, time stamps, and clickstream.
• Cookies and similar technologies: see Section 7.
• Usage: course progress, video watch time, login activity, feature usage.

1.3 Information from third parties

We may receive information from payment processors, analytics providers, advertising partners, scheduling tools, email service providers, the Discord platform, and customers who refer you. We combine this information with what we collect directly.

2. How We Use Information

We use information to:

• provide, deliver, and operate the Services;
• process orders, subscriptions, renewals, refunds, and chargebacks;
• authenticate users and prevent fraud, abuse, account sharing, or unauthorized access;
• schedule and conduct consults, coaching, and prebuilt store handoffs;
• communicate with you about your account, transactions, schedule changes, course updates, and support requests;
• send marketing emails about our Services where permitted, with an unsubscribe option;
• improve and personalize the Services, develop new features, and conduct analytics and research;
• enforce our Terms, protect our rights, and comply with legal obligations;
• with your consent, feature anonymized or attributed results, testimonials, or case studies in marketing.

3. Legal Bases for Processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract: to provide the Services you purchase.
• Legitimate interests: to operate, secure, and improve the Services, prevent fraud, and conduct marketing of our own similar services where permitted.
• Consent: for non-essential cookies, marketing emails where required, and certain optional features.
• Legal obligation: to comply with tax, accounting, and other applicable laws.

4. How We Share Information

We do not sell your personal information for money. We share information only as described below:

• Service providers: hosting (e.g., Vercel), payment processing (e.g., Stripe), email delivery, analytics, scheduling, video conferencing, customer support, and community platforms (e.g., Discord), each authorized to use the information only to perform services for us.
• Advertising and analytics partners:for measurement and audience building; this may constitute a “sale” or “sharing” under certain U.S. state laws — see Section 11.
• Legal and safety: to comply with law, valid legal process, or government request; to enforce our Terms; to protect the rights, property, or safety of the Company, our customers, or others; or to prevent fraud or abuse.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction.
• With your consent: for any purpose disclosed when we collect the information.

5. Marketing Use of Results and Testimonials

With your consent (including consent given by submitting a testimonial or by participating in a public community channel where you post results), we may publish your name, results, screenshots, store URL, photo, video, or quote in our marketing. You can revoke consent for future use at any time by contacting us; revocation does not affect prior use.

6. Data Retention

We retain personal information for as long as needed to provide the Services, to comply with our legal, tax, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Typical retention periods include:

• Account and order records: up to 7 years after closure.
• Payment transaction records: as required by law.
• Marketing contacts: until you unsubscribe, then a suppression record only.
• Coaching notes and call recordings: up to 24 months unless required to be kept longer.

7. Cookies and Similar Technologies

We and our partners use cookies, pixels, SDKs, and similar technologies to operate the Services, remember your preferences, measure performance, and (where permitted) personalize advertising. Categories include:

• Strictly necessary: required for login, cart, and checkout.
• Functional: remember preferences and settings.
• Analytics: measure traffic and usage.
• Advertising: measure ad effectiveness and build audiences.

You can control cookies through your browser settings or any cookie banner we provide. Blocking some cookies may affect functionality. We honor the Global Privacy Control (GPC) signal where required by law.

8. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. Notify us immediately at hello@example.com if you suspect unauthorized access.

9. International Transfers

We are based in [State/Province], [Country], and we and our service providers may process your information in the United States and other countries that may not provide the same level of protection as your jurisdiction. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

10. Children’s Privacy

The Services are not directed to children under 18 (or, in the EEA/UK, under 16). We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at hello@example.com and we will take appropriate steps to delete it.

11. Your Privacy Rights

11.1 General rights

Subject to applicable law and identity verification, you may request to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete personal information;
• restrict, object to, or withdraw consent for certain processing;
• port your information in a portable, machine-readable format;
• opt out of marketing emails using the unsubscribe link in any message;
• opt out of cookie-based advertising through our cookie controls or the GPC signal.

To exercise these rights, email hello@example.com. We may need to verify your identity before fulfilling the request and may decline requests as permitted by law (e.g., where we have an ongoing legal obligation to retain the information).

11.2 California (CCPA / CPRA)

California residents have the right to know what personal information we collect, the right to delete, the right to correct, the right to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising, the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell personal information for money. To opt out of sharing for advertising, use the cookie controls on our site or send a GPC signal.

11.3 EEA / UK

You have the right to lodge a complaint with your local data protection authority. We act as the controller of your personal data under the UK GDPR and EU GDPR.

11.4 Other U.S. states

Residents of states such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others may have similar rights. We honor verifiable requests under those laws to the extent applicable.

12. Third-Party Links

The Services may contain links to third-party websites, suppliers, or platforms not operated by us (e.g., Shopify, suppliers, ad networks, Discord). We are not responsible for the privacy practices or content of those sites. Review their policies before providing information.

13. Do Not Track

Some browsers send a “Do Not Track” signal. Because there is no industry standard, we currently do not respond to DNT signals, but we honor the GPC signal where legally required.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be notified by posting the updated policy on the Services or by email. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

15. Contact Us

Questions, requests, or complaints can be sent to hello@example.com.