We collect personal information that you voluntarily provide when you register, express interest in our services, participate in activities on the platform, or contact us. This may include:
Sensitive Information: We do not process sensitive personal information (such as racial or ethnic origins, sexual orientation, or religious beliefs).
We may collect data necessary to process your payment, such as your payment instrument number and associated security code. All payment data is handled and stored by Stripe. You may review Stripe's privacy notice at https://stripe.com/privacy.
We automatically collect certain information when you visit, use, or navigate our Services. This includes device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use our Services. This information does not reveal your specific identity but is used for security, analytics, and service operation.
We also collect information through cookies and similar technologies. For more information, please see Section 5 below.
Automatically collected data includes:
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We process your personal information for the following purposes:
We may also process your information for other purposes only with your prior explicit consent.
We only process your personal information when we have a valid legal reason to do so under applicable law.
Under GDPR and UK GDPR, we rely on the following legal bases:
We may process your information based on express or implied consent. You may withdraw your consent at any time by contacting us. In some exceptional cases, we may process information without consent as permitted by applicable Canadian law.
We may share your personal information with third-party vendors, service providers, contractors, or agents who perform services for us and require access to such information. We have contracts in place with these third parties to help safeguard your data.
The third parties we share personal information with include:
We may also share your information in the following situations:
We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. These technologies help us maintain service security, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
We also permit third parties and service providers to use online tracking technologies for analytics and advertising purposes, including tailoring advertisements to your interests.
To the extent these technologies are deemed a "sale" or "sharing" under applicable US state laws, you can opt out by submitting a request as described in Section 13.
Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies, though this may affect certain features of our Services.
Yes. As part of our Services, we offer products and features powered by artificial intelligence, machine learning, and similar technologies (collectively, "AI Products").
We provide these AI Products through third-party AI Service Providers, including Anthropic. Your input, output, and personal information may be shared with and processed by these providers to enable your use of our AI features. You must not use our AI Products in any way that violates the terms or policies of any AI Service Provider.
Our AI Products are designed for the following functions:
All personal information processed using our AI Products is handled in accordance with this Privacy Notice and our agreements with third-party providers.
Our servers are located in the United States. Regardless of your location, your information may be transferred to, stored by, and processed by us and our third-party providers in the United States and other countries.
If you are a resident of the EEA, UK, or Switzerland, please be aware that these countries may not have data protection laws as comprehensive as your own. However, we take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law, including using the European Commission's Standard Contractual Clauses for international transfers where required. Our Standard Contractual Clauses can be provided upon request.
We keep your personal information only as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (for example, because it is stored in backup archives), we will securely isolate your information from further processing until deletion is possible.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect your personal information. These include secure authentication via Supabase, encrypted payment processing via Stripe, and HTTPS encryption for all data in transit.
However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
We do not knowingly collect, solicit data from, or market to children under 13 years of age, nor do we knowingly sell such personal information.
By using the Services, you represent that you are at least 13 years old, or that you are the parent or guardian of a minor and consent to that minor's use of the Services. Users between 13 and 17 should have parental consent.
If we learn that personal information from users under 13 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 13, please contact us at [email protected].
Depending on where you are located, you may have certain rights regarding your personal information.
You may have the right to: request access and obtain a copy of your personal information; request rectification or erasure; restrict processing; data portability; and not be subject to automated decision-making. You may also have the right to object to processing in certain circumstances.
If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or UK data protection authority.
If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at [email protected]. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us. You will be removed from marketing lists, though we may still send service-related messages necessary for account administration.
To review or change your account information, or to terminate your account, contact us at [email protected]. Upon your request to terminate, we will deactivate or delete your account from our active databases, though we may retain some information for fraud prevention, legal compliance, or other legitimate purposes.
If you have questions about your privacy rights, email us at [email protected].
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your browsing activities monitored. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.
California law requires us to inform you of this. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights under your state's laws.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, alias, IP address, email address, account name | No |
| B. California Customer Records | Name, contact info, financial information | No |
| C. Protected classification characteristics | Gender, age, race, ethnicity, marital status | No |
| D. Commercial information | Transaction information, purchase history, payment information | No |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or network activity | Browsing history, search history, interactions with our Services | No |
| G. Geolocation data | Device location | No |
| H. Audio, electronic, sensory information | Images and audio/video recordings | No |
| I. Professional or employment-related | Business contact details, job title, work history | No |
| J. Education information | Student records and directory information | No |
| K. Inferences from personal information | Profile or summary about preferences and characteristics | No |
| L. Sensitive personal information | — | No |
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.
You may have the following rights under applicable US state law:
Depending on your state, you may also have rights specific to your jurisdiction, including Minnesota residents' right to access categories of data being processed, and California residents' right to limit use of sensitive personal data.
To exercise these rights, contact us by emailing [email protected] or by referring to the contact details in Section 15.
You may designate an authorized agent to make a request on your behalf. We may require proof of authorization before processing such requests.
Upon receiving your request, we will verify your identity using the information in your account. If we cannot verify your identity from existing information, we may request additional information for verification and fraud-prevention purposes.
If we decline to take action on your request, you may appeal by emailing [email protected]. We will inform you in writing of any action taken or not taken, including a written explanation. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information we disclosed to third parties for direct marketing purposes in the immediately preceding calendar year. To make such a request, contact us using the details in Section 15.
Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws or to reflect changes in our practices. The updated version will be indicated by an updated "Last Updated" date at the top of this page.
If we make material changes, we may notify you by posting a prominent notice on our website or by sending you a direct notification. We encourage you to review this Privacy Notice periodically to stay informed about how we protect your information.
If you have questions or comments about this Privacy Notice, you may contact us:
15753 Porchlight Ln
Eden Prairie, MN 55347
United States