Privacy Policy

1. Information We Collect

Personal Information: When you create an account or make a purchase, we collect your name, email address, billing address, and phone number (if provided).

Payment Information: Credit card data is processed securely through Authorize.net using Accept.js tokenization. We never store full credit card numbers, CVV codes, or expiration dates on our servers. Only the last four digits and card type may be retained for receipt purposes.

Usage Data: We collect information about how you interact with our site, including pages visited, lessons completed, quiz results, and referral source. This is used to improve our content and user experience.

Communication Data: When you submit a contact form, newsletter signup, or assessment, we retain the information you provide to respond to your inquiry and provide our services.

2. How We Use Your Information

• To create and manage your student account
• To process payments and deliver purchased courses and materials
• To send order confirmations and important account notifications
• To provide coaching services and track your learning progress
• To send newsletters and marketing emails (you can unsubscribe at any time)
• To analyze and improve our courses, content, and platform
• To comply with legal obligations and prevent fraud

3. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, remember your login session, and analyze site traffic. We use Google Analytics and Vercel Analytics to understand how visitors use our site. These tools collect anonymous usage data such as pages visited, time on site, and geographic region.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with service providers who help us operate our business:

• Authorize.net — Payment processing and subscription billing
• Google Analytics — Anonymous website analytics
• Vercel Analytics — Website performance monitoring
• Mailgun — Email campaign delivery and tracking
• Google Cloud Storage — Secure storage of course resource files
• Supabase — Database hosting

Each provider has their own privacy policy governing data handling. We only share the minimum information necessary to provide our services.

5. Data Security

We implement industry-standard security measures including SSL/TLS encryption for all data transmissions, bcrypt password hashing, secure payment tokenization via Authorize.net, and access controls. Our site uses Content Security Policy (CSP) headers and HTTPS enforcement.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

6. Data Retention

We retain your account information and purchase history for as long as your account is active or as needed to provide our services. You may request deletion of your account at any time. Some data may be retained for legal or accounting purposes after account closure.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Opt out of marketing emails at any time
• Cancel subscriptions at any time

To exercise these rights, contact us through our contact page.

8. Children's Privacy

Our services are intended for adults 18 years and older. We do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact

For privacy questions or requests, contact us at our contact page or email george@mahoneymasterminds.com.