Privacy Policy

1. Information We Collect

Personal Information You Provide:

• Name and email address (when you make a purchase or subscribe to our newsletter)
• Payment information (processed securely by Stripe — we never store card details)
• Account credentials (managed through our authentication provider)
• Any information you voluntarily submit through forms, chat, or support requests

Information Collected Automatically:

• Browser type and version
• Device type and operating system
• IP address and approximate location
• Pages visited, time spent, and navigation patterns
• Referring website or source

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your purchases
• Deliver digital products and access codes
• Send transactional emails (purchase confirmations, access codes)
• Send marketing emails if you opted in (you can unsubscribe at any time)
• Improve our website, products, and user experience
• Analyze usage patterns and website performance
• Prevent fraud and protect against unauthorized transactions
• Comply with legal obligations

3. Third-Party Services

We use trusted third-party services to operate our business. These services may have access to your personal information only to perform specific tasks on our behalf:

• Stripe — Payment processing (PCI-DSS compliant)
• Beehiiv — Email marketing and newsletter delivery
• Umami Analytics — Privacy-focused website analytics (no cookies, GDPR compliant)
• Amazon Web Services (AWS) — Cloud hosting and file storage

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

4. Cookies & Tracking

We use minimal cookies necessary for the operation of our website:

• Session cookies — Required for authentication and maintaining your login state
• Preference cookies — Remember your settings and choices

Our analytics provider (Umami) is cookie-free and does not track individual users across websites. We do not use advertising cookies or retargeting pixels by default.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• All data transmitted via HTTPS/TLS encryption
• Payment data handled exclusively by Stripe (PCI-DSS Level 1 certified)
• Access controls and authentication for all internal systems
• Regular security reviews of our infrastructure

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Purchase records and access codes are retained for the lifetime of the product. You may request deletion of your account and associated data at any time.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to request deletion of your personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.