Privacy Policy

1. Introduction

Affiliate Academy, LLC (“Affiliate Academy,” “we,” “us,” or “our”) operates affiliate-academy.com and the education programs, member communities, and related services offered through it (the “Services”). This Privacy Policy explains what personal information we collect, where we get it, how we use it, who we share it with, how long we keep it, and what rights you have over it.

This policy applies to visitors to our websites, people who message us on social media, people who book calls with us, our customers and members, and prospective customers. It does not apply to third-party websites, platforms, or services we link to or rely on, each of which has its own privacy practices.

Who is responsible for your information. For customers and visitors in the European Economic Area, the United Kingdom, and Switzerland, Affiliate Academy, LLC is the “data controller” of the personal data described in this policy. For California residents, we are a “business” under the California Consumer Privacy Act. We sell and deliver our programs worldwide.

Contact: legal@affiliate-academy.com, or Affiliate Academy, LLC, 14 Tobey Rd., Ste G184, Wareham, MA 02571, United States.

Age. Our Services are intended for adults aged 18 and over. See Section 14.

2. Summary of Key Points

• We collect the information you give us (name, email, phone, business details, payment information handled by our processors), information collected automatically when you browse (IP address, device and browser data, page activity, cookie identifiers), and information we receive from platforms you use to reach us, including Instagram and our scheduling, email, and payment providers.
• We use it to deliver the programs you buy, to run our business, to communicate with you, and to market our programs.
• We do not sell your personal information for money. We do use advertising and analytics technologies, including the Meta Pixel, that involve disclosing certain identifiers to advertising platforms. Some United States privacy laws define that as a “sale” or “share” for targeted advertising, and you can opt out. See Sections 8 and 10.
• We keep your information as long as we need it, and we describe those periods in Section 11.
• You have rights over your information, including access, correction, deletion, and opt-out. Section 13 explains them and how to use them.

3. Information You Provide to Us

Newsletter subscription. When you subscribe to our newsletter, we collect your email address and, if you choose to give it, your first name. We use confirmed opt-in: we send you a confirmation email, and we do not send you the newsletter until you click the link in it. We also record which page you subscribed from, so we can tell what brings readers in. Your subscription is stored in our own private storage and is also sent to beehiiv, the platform that hosts and delivers the newsletter. You can unsubscribe at any time — see Section 16.

Income quiz. When you take the quiz on our website, we collect your answers to its multiple-choice questions, which cover your income goal, work situation, experience, available time, niche interest, what has held you back, how you prefer to work, how much you could invest, and when you want to start, along with your first name and email address. We use your answers to produce a written breakdown for you and, if you book a call, to prepare for it. The written part of that breakdown is generated by an artificial intelligence model operated by Anthropic. We send that model your answers only; we do not send it your name or email address. We also record the tracking parameters on the link that brought you to the quiz, so we can tell which post or message it came from and connect your answers to a later booking. Your submission is stored in our own private storage and in the customer relationship system our sales team uses, and a copy of your breakdown is kept in your own browser so the results page can show it to you. If you go on to book a call from that page, the name and email address you gave are passed to our scheduling provider to fill in the booking form for you.

Inquiries and messages. When you email us, fill out a form, comment on our content, or send us a direct message on a social platform, we receive the content of your message and any information in it, along with your name, handle, and contact details.

Applications and booked calls. When you book a call with us through our scheduling provider (currently Calendly), we collect the information you enter on the booking and routing form. This typically includes your name, email address, phone number, time zone, and answers to qualification questions about your business, such as your current business model, revenue range, experience level, goals, timeline, and available budget. We use this to determine fit and to prepare for the call.

Enrollment and account information. When you enroll, we collect your name, billing and contact information, email address, phone number, account credentials for the member platform, and the details of your purchase, including tier, price, and payment schedule.

Payment information. Payments are processed by third-party processors, currently Stripe and Commas (formerly FanBasis). We do not receive or store your full payment card number, CVV, or bank credentials. We receive transaction records from our processors, which may include the last four digits of your card, card brand, expiration date, billing name and address, transaction amounts and dates, subscription or installment schedule, and the success or failure of each charge.

Program participation. Once enrolled, we collect information generated by your use of the program, including lesson and module progress, quiz or worksheet responses, support requests, community posts and comments, questions submitted for calls, direct messages within the community platform, and your attendance on live calls, including recorded audio, video, screen shares, chat, and display name. See Section 5 of our Terms of Service regarding recordings.

Testimonials and results. If you choose to share a testimonial, case study, screenshot, or result with us, we collect what you submit. See Section 10 of our Terms of Service for how we may use it.

Correspondence. We retain our email, SMS, direct message, and support correspondence with you.

You are not required to provide any of this. Withholding it will limit or prevent your use of the Services.

4. Information Collected Automatically

When you visit our websites or open our emails, we and our service providers may automatically collect:

• IP address and general location derived from it, such as city, region, and country;
• device and browser type, operating system, language, screen size, and device identifiers;
• referring URL, exit pages, pages and content viewed, time and duration of visits, clicks, scroll depth, and files downloaded;
• email interaction data such as opens and link clicks;
• video engagement data, such as how much of a sales video or lesson you watched;
• cookie and pixel identifiers, including advertising identifiers assigned by advertising platforms.

We collect this through cookies, pixels, tags, web beacons, software development kits, server logs, and similar technologies. See Section 8.

If you access the Services from a mobile device, your carrier or device may transmit device identifiers to us, and if you enable location services, we may receive approximate location data. You can disable location services in your device settings.

5. Information We Receive From Third Parties

Instagram and Meta. We run automation on our Instagram account through ManyChat. When you comment on our posts or reels using a trigger keyword, reply to one of our stories, or send us a direct message, ManyChat receives your Instagram username, Instagram-assigned user identifier, profile name, profile picture, follower status, the content of your comment or message, and the timing of that interaction, and it creates a contact record for you in our system. If you continue the conversation, we collect your replies, including any name, email address, phone number, or business information you provide in the DM, along with tags we apply to describe your interest, stage, and answers. This data flows into our internal systems, including automation and workflow tools we operate, for the purpose of responding to you and following up. Your interaction with Instagram itself is governed by Meta's privacy policy, and we do not control it.

Scheduling provider. Our scheduling provider sends us your booking details, form answers, calendar events, reschedules, cancellations, and no-show status.

Payment processors. Our processors send us the transaction and billing records described in Section 3, along with dispute and chargeback records.

Email and newsletter providers. Our email providers, currently beehiiv and MXRoute, provide us with subscription status, delivery, open, click, bounce, and unsubscribe data.

Advertising and analytics platforms. Advertising and analytics providers give us aggregated and, in some cases, individual-level reporting on campaign performance, audience characteristics, and conversions.

Community and course platforms. The platforms hosting our curriculum and community provide us with account, progress, engagement, and moderation data.

Publicly available and business sources. We may review publicly available information about you or your business, such as your social profiles or website, in connection with evaluating fit or supporting you in the program.

6. How We Use Your Information

We use personal information to:

• deliver the programs, materials, community access, calls, and support you purchased;
• create, authenticate, secure, and administer your account;
• process payments, run scheduled installments, issue receipts, collect past due amounts, and respond to chargebacks and disputes;
• respond to your inquiries, direct messages, and support requests;
• qualify prospective customers, schedule and prepare for sales and onboarding calls, and follow up with people who inquired but did not enroll;
• personalize your experience, including what content and recommendations you see;
• send you service and transactional messages, including onboarding, scheduling, reminders, account notices, billing notices, and program updates;
• send you marketing emails and, where you have consented, text messages about our programs, content, and offers;
• create, target, measure, and optimize advertising, including custom and lookalike audiences on advertising platforms;
• record, store, and make available call recordings to members as described in our Terms of Service;
• analyze usage and improve our curriculum, website, funnels, and Services;
• develop new programs, tools, and offerings;
• publish testimonials and results you have provided to us, as described in our Terms of Service;
• detect, investigate, and prevent fraud, unauthorized access, credential sharing, scraping, and other misuse;
• comply with law, enforce our Terms of Service, and establish, exercise, or defend legal claims.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you.

7. Legal Bases for Processing (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies to our processing, we rely on the following legal bases:

• Performance of a contract, to deliver the program you purchased, administer your account, process payments, and provide support;
• Legitimate interests, to operate, secure, analyze, and improve our business, to prevent fraud and misuse, to respond to inquiries, to conduct direct marketing to existing customers, and to establish or defend legal claims, in each case where those interests are not overridden by your rights;
• Consent, for non-essential cookies and similar technologies, for marketing communications where consent is required, for text messages, and for the use of testimonials, biographical details, and images in our marketing. You may withdraw consent at any time, and withdrawal does not affect processing carried out before withdrawal;
• Legal obligation, to meet tax, accounting, and other legal and regulatory requirements.

8. Cookies, Tracking, and Advertising

What we use. We and our providers use cookies (small text files stored on your device), pixels and web beacons (small pieces of code embedded in pages and emails), tags, and similar technologies. These serve several purposes:

• Strictly necessary, to operate the site, authenticate you, maintain your session, and secure the Services;
• Functional, to remember your preferences and settings;
• Analytics, to understand how the site and funnels are used, including through providers such as Google Analytics;
• Advertising, to deliver and measure our advertising, including through the Meta Pixel and comparable technologies from other advertising platforms.

What advertising technologies do. Advertising pixels allow platforms such as Meta to recognize that a browser or device that interacted with our site or content also corresponds to one of their users, so that we can show ads to you, exclude you from ads, build audiences of people similar to our customers, and measure which ads produce enrollments. We may also upload contact lists, or hashed versions of email addresses and phone numbers, to advertising platforms for audience matching. This activity is treated as a “sale” or a “share” for cross-context behavioral advertising under several United States state privacy laws, and you may opt out. See Section 10.

Your choices. Most browsers let you refuse or delete cookies through their settings. Disabling cookies will break parts of the Services. You can opt out of Google Analytics using the browser add-on Google provides. You can also manage advertising preferences directly with advertising platforms and through industry tools operated by the Digital Advertising Alliance and the Network Advertising Initiative, and, on mobile, through your device advertising settings. Where required by law, we present a cookie banner and set non-essential cookies only after you consent.

Global Privacy Control and Do Not Track. We honor the Global Privacy Control (“GPC”) signal as a valid request to opt out of the sale and sharing of personal information and of targeted advertising for the browser and device transmitting it. Browsers also offer a “Do Not Track” setting, for which no common industry standard exists, and we do not currently respond to it separately from GPC.

9. How We Share Your Information

We do not sell your personal information for money, and we do not rent or trade your contact information to third-party data brokers or marketing list companies.

We share personal information in the following circumstances:

Service providers and processors. We share information with vendors who perform functions on our behalf, under contracts requiring them to use it only for those functions. Categories include: website and application hosting; course and community platform hosting; payment processing (Stripe, Commas); scheduling (Calendly); marketing automation and messaging (ManyChat); email delivery (beehiiv, MXRoute); artificial intelligence text generation (Anthropic); workflow automation and internal data tooling; customer relationship management; video conferencing and recording; analytics; advertising platforms; file storage; accounting; and legal and professional advisors.

Advertising platforms. As described in Sections 8 and 10.

Coaches, closers, and contractors. People who deliver or sell our programs receive the information they need to do so, including your application answers, purchase history, and program progress, under confidentiality obligations.

Other members. Anything you post inside a community, ask on a call, or share in a group setting is visible to other members. Our Terms of Service prohibit members from sharing that content outside the community, and we cannot guarantee that every member will comply. Use your judgment about what you disclose.

Legal and safety. We may disclose information where we believe in good faith that it is required by law, regulation, subpoena, court order, or lawful government request, or where it is necessary to enforce our Terms of Service, to investigate suspected fraud or violations, to protect our rights or property, or to protect the safety of any person.

Business transfer. If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, personal information may be transferred as part of that transaction. We will use reasonable efforts to notify you of a change in ownership or use of your personal information.

With your direction. We share information where you ask us to or otherwise consent.

10. Targeted Advertising, “Sale,” and “Share”

Several United States state privacy laws define “sale,” “share,” and “targeted advertising” broadly enough to include the pixel-based and audience-matching advertising described in Section 8, even though we receive no money for your information.

In the preceding twelve months, we have disclosed the following categories of personal information for cross-context behavioral advertising: identifiers (including email address, phone number in hashed form, IP address, and cookie or advertising identifiers), internet and electronic network activity (including pages viewed, videos watched, and conversion events), and commercial information (including purchases and enrollment status). The categories of recipients are advertising platforms and their affiliates. We do not knowingly sell or share the personal information of consumers under 16 years of age.

To opt out, do any of the following:

• send a request to legal@affiliate-academy.com with the subject line “Do Not Sell or Share My Personal Information,” including your first name, last name, email address, country, and state;
• enable a Global Privacy Control signal in your browser or extension, which we will honor for that browser and device;
• use any “Do Not Sell or Share My Personal Information” link in our website footer where one is presented.

An opt-out submitted through a browser signal applies to that browser and device only. If you clear cookies, switch browsers, or use a different device, submit it again. An opt-out submitted by email applies more broadly to the contact record we can match it to.

We will not discriminate against you for exercising any privacy right. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised a right.

11. How Long We Keep Your Information

We keep personal information for as long as needed for the purposes described in this policy, and then delete or de-identify it. In practice:

• Customer and enrollment records, including transaction records, for the duration of your access plus the period required by tax, accounting, and limitations law, generally at least seven (7) years;
• Member accounts and program progress, for as long as your access continues, and for a reasonable period afterward to allow reactivation and to defend claims;
• Prospect and inquiry records, including application answers, quiz answers, and DM conversations, for up to twenty-four (24) months after your last interaction, unless you ask us to delete them sooner;
• Marketing lists, until you unsubscribe or opt out, plus a suppression record retained indefinitely so that we can honor your opt-out;
• Call recordings, for as long as we operate the applicable program library;
• Website analytics and log data, generally between fourteen (14) and twenty-six (26) months, depending on the provider;
• Records needed for legal claims, disputes, chargebacks, or investigations, until the matter is resolved and the applicable limitations period has expired.

12. International Transfers

We are based in the United States, and our service providers are located primarily in the United States. If you are located outside the United States, your personal information will be transferred to, stored in, and processed in the United States and in other countries where our providers operate. Privacy laws in those countries may differ from those in your country.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, which include the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where required. You may request a copy of the relevant safeguards by writing to legal@affiliate-academy.com.

13. Your Privacy Rights

Your rights depend on where you live. We honor the rights below for the residents entitled to them, and as a matter of practice we will consider any request from any customer anywhere.

13.1 Rights Available Under United States State Privacy Laws

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law, you may have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you, the sources, the business or commercial purposes for collecting it, the categories of third parties to whom we disclose it, and the categories disclosed for a business purpose or for targeted advertising;
• Correct inaccurate personal information we maintain about you;
• Delete personal information we collected from you, subject to exceptions such as completing a transaction, detecting security incidents or fraud, complying with a legal obligation, and exercising or defending legal claims;
• Obtain a portable copy of personal information you provided to us, in a readily usable format;
• Opt out of the sale or sharing of personal information and of targeted advertising, as described in Section 10;
• Limit the use of sensitive personal information, noting that we do not collect or use sensitive personal information for purposes requiring this right;
• Appeal a denial of a request, where your state provides that right. To appeal, reply to our decision or write to legal@affiliate-academy.com with the subject “Privacy Appeal,” and we will respond within the period your state's law allows. If your appeal is denied, you may contact your state attorney general.

Under the CCPA, California residents may make access requests up to twice in a twelve-month period.

Categories of personal information we have collected in the preceding twelve months: identifiers (name, email address, postal address, phone number, IP address, account credentials, social media handles and platform identifiers); customer records under Cal. Civ. Code § 1798.80(e) (name, address, telephone number, and payment-related information held by our processors); commercial information (products and services purchased, purchase history, payment plan status); internet and electronic network activity (browsing and interaction with our sites, content, emails, and ads); geolocation data (approximate location derived from IP address); audio, electronic, and visual information (call recordings, screen shares, chat, and photographs or video you submit); professional or employment-related information (your business, revenue range, experience, and goals as you report them); and inferences drawn from the above about your interests, fit, and likelihood to enroll.

We collect these categories from the sources described in Sections 3 through 5, and use and disclose them for the purposes described in Sections 6, 9, and 10.

13.2 Rights Available Under the GDPR and UK GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to: be informed about our processing; access your personal data; have inaccurate data corrected; have data erased in certain circumstances; restrict processing in certain circumstances; data portability; object to processing carried out on the basis of legitimate interests, including profiling; and object at any time to direct marketing. Where we process on the basis of consent, you may withdraw it at any time.

These rights are subject to the conditions and exemptions in Articles 12 through 23 of the GDPR and the equivalent UK provisions.

If you are not satisfied with how we handle your personal data or your request, you have the right to complain to your national data protection authority, or, in the United Kingdom, to the Information Commissioner's Office.

13.3 How to Exercise Your Rights

Send your request to legal@affiliate-academy.com. Tell us what right you want to exercise and include the email address associated with your account or your interaction with us. We may ask you to complete a short form.

Verification. We can only act on a request if we can verify your identity or your authority to make it. We will match the information in your request against our records and may ask for additional information. We use any information you provide for verification solely for that purpose. We may decline a request in whole or in part where we cannot resolve reasonable doubts about identity, since acting on an unverified request would itself risk exposing your information.

Timing. We will acknowledge receipt and respond within the period required by the law that applies to you, generally within thirty (30) to forty-five (45) days, and we will tell you if we need an extension.

Authorized agents. You may use an authorized agent, who must provide proof that you authorized them to act on your behalf, or a valid power of attorney. We may contact you directly to confirm the authorization and to verify your identity. An authorized agent may not use your information for any purpose other than fulfilling your request, verification, and fraud prevention.

Cost. We do not charge for these requests unless they are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline, and we will explain why.

14. Children

The Services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of anyone under 16. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us with personal information, contact legal@affiliate-academy.com and we will remove it.

We encourage parents and guardians to talk with their children about sharing personal information online.

15. How We Protect Information

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These include encryption in transit, access controls and least-privilege permissions for staff and contractors, use of reputable processors that handle payment data under PCI DSS standards, and contractual security obligations on our vendors.

No system is completely secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed by breach of our safeguards. You are responsible for maintaining the confidentiality of your account credentials and for using a strong, unique password.

We maintain incident response procedures, and we require our vendors to notify us promptly if they have reason to believe an incident has affected information we provided to them. Where required by law, we will notify you and the relevant authorities of a breach affecting your personal information.

16. Marketing Communications and Your Choices

Email. If you have consented to marketing email, or where permitted by law as an existing customer, we may send you newsletters, content, and promotional messages. You can unsubscribe at any time using the link in the footer of any marketing email, or by writing to legal@affiliate-academy.com. Transactional and service messages, such as receipts, billing notices, scheduling confirmations, account notices, and program updates, are not marketing, and you cannot unsubscribe from them while you hold an active account or an outstanding balance.

Text messages. We may send text messages relating to your booked calls and your program, including confirmations and reminders. Where those messages are sent through our scheduling provider, consent is collected at the point of booking through that provider's interface, and you can decline to provide a mobile number.

If you receive text messages from us, message and data rates may apply, and message frequency varies. Reply STOP to any message to opt out, and HELP for assistance. Carriers are not liable for delayed or undelivered messages. We do not sell, rent, or share mobile phone numbers or SMS consent with third parties for their own marketing purposes. Mobile numbers are shared only with the service providers that deliver the messages on our behalf.

Direct messages. If you message us on a social platform, we will reply there, and we may follow up. Tell us to stop and we will.

Processing time. Opt-out requests take effect promptly, and you may receive messages already in queue for a short period afterward.

17. Third-Party Platforms, Links, and Social Media

We maintain a presence on third-party platforms, including Instagram, and our sites may link to or embed third-party content. Those platforms and sites are controlled by others, have their own privacy policies and terms, and are not covered by this policy. Anything you post publicly on a social platform, including comments on our posts, is public and outside our control.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version at affiliate-academy.com with a new “Last Updated” date, and where changes are material we will provide notice by email or through the Services before they take effect, or as otherwise required by law. Information we collect is subject to the policy in effect at the time of collection. Please review this page periodically.

The English language version of this policy controls over any translation.

19. Contact Us

Questions, requests, or complaints about privacy:

Affiliate Academy, LLC
Attention: Privacy
14 Tobey Rd., Ste G184
Wareham, MA 02571
United States
legal@affiliate-academy.com

If you are in the European Economic Area or the United Kingdom, you may contact us at the same address regarding your rights under the GDPR or UK GDPR, and you may also lodge a complaint with your local supervisory authority.