How we handle your stuff.

What we collect

• Account info — first + last name, email address
• Business profile — business name, location, business type(s), primary goal, posting cadence (you type these; we don't scrape them)
• Activity inside the app — which templates you open, resources you download, updates you dismiss
• Payment records — the last 4 digits of your card, plus billing history. Full card details never touch our servers — Stripe holds them
• Standard log data — IP address, browser, timestamps, error reports

What we never do

• Sell your data to anyone. Ever.
• Rent, trade, or share your data with advertisers
• Use your posts or captions to train AI models
• Sneak subscribe you to marketing you didn't opt into

Who reads your data

Megan and the small LBC support team, when helping you or debugging something. Our infrastructure providers process it on our behalf but never for their own use:

• Supabase — database + auth (US region for MVP, moving to Canada region when available)
• Stripe — payments and billing
• Kit — marketing email delivery
• Resend — transactional email (magic links, receipts, trial reminders)
• Vercel — application hosting
• Vimeo — course video hosting (Phase 2+)

How email marketing works

Membership signup is CASL “express consent” for member-only emails (Game Plan, resource drops, account state). Membership ends → those emails end.

Megan's general newsletter is separate. You choose whether to stay on it at cancellation via an explicit checkbox (default: unchecked). Unsubscribe any time from the footer of any email.

How affiliate links work

Some resource-hub cards link to software Megan recommends. LBC sometimes earns a commission if you sign up — it never costs you more, and it never changes what we recommend. Each card labels whether it's an affiliate link.

How long we keep it

While your account is active, we keep your data for as long as you keep the account. Delete your account from Settings and everything personal is erased within 30 days, except: (a) billing records we must keep for tax and accounting, (b) cancellation consent records required by CASL.

Your rights (PIPEDA)

• See what we have about you — request an export
• Fix anything wrong — edit in Settings or ask
• Delete your account and personal data
• Withdraw email consent at any time
• Complain to the Office of the Privacy Commissioner of Canada if you think we're out of line

Cookies

We use essential cookies for login sessions and a single analytics cookie for anonymous page-view stats. No cross-site ad trackers.

Kids

LBC is for adults running small businesses. Not for anyone under 18.

Changes

When we change this policy, we'll email active members and post the diff. No silent updates.