Privacy Policy

Data we collect

Depending on how you use the service, we may collect:

- account information, such as name, email address, member ID, tier, and account status;

- transaction information, such as membership price, currency, date, payment status, refunds, and limited card details supplied by Stripe (for example card brand and last four digits); we do not receive your full payment-card number;

- email information, including subscriptions, delivery status, opens or clicks where enabled, and communication preferences;

- content and support information, including comments, Discord role information, messages, and support requests;

- technical and usage information, such as IP address, device/browser information, authentication events, referral source, page activity, and security logs;

- information you voluntarily provide in surveys, forms, comments, or community interactions.

Why we use data and our legal bases

We process personal data to:

- create and administer accounts and memberships, provide purchased content, process cancellations, and deliver member benefits (**performance of a contract**);

- process payments and prevent fraud through Stripe (**contract, legitimate interests, and legal obligations**);

- send newsletters and marketing where permitted (**consent**, or another lawful basis where applicable);

- send essential account, security, billing, and service messages (**contract and legitimate interests**);

- provide support, moderate the community, protect the service, diagnose problems, and improve content (**contract and legitimate interests**);

- maintain tax, accounting, consumer, and legal records (**legal obligation**);

- establish, exercise, or defend legal claims (**legitimate interests and applicable law**).

Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing.

Service providers and recipients

We share data only as reasonably necessary with providers that help operate Aitrepreneur, which may include:

- **Ghost Foundation Ltd / Ghost(Pro)** for website hosting, membership accounts, newsletters, analytics, and content delivery;

- **Stripe** for payments, subscriptions, billing, fraud prevention, tax tools, and receipts;

- domain, DNS, email-delivery, security, backup, and infrastructure providers;

- **Discord** if you join member community spaces;

- YouTube, X, GitHub, Hugging Face, AI providers, cloud GPU services, or other third parties when you choose to follow links, use embeds, or access their services;

- professional advisers, authorities, courts, or counterparties when legally required or necessary to protect rights.

Each independent third party may process data under its own privacy policy. We do not sell personal data.

International transfers

Some providers may process data outside the European Economic Area. Where GDPR requires safeguards, we rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

Retention

We retain data only as long as reasonably necessary for the purposes described above, including:

- account data while the account is active and for a reasonable period afterward;

- transaction, invoice, tax, and accounting records for the period required by applicable law;

- support and security records as needed to resolve issues, prevent abuse, and protect legal rights;

- newsletter data until you unsubscribe or the list is cleaned, subject to minimal suppression records needed to honor opt-outs.

Backups may retain deleted data for a limited period before automatic replacement.

Cookies and similar technologies

Aitrepreneur may use essential technologies needed for secure sign-in, membership access, payment flow, preferences, and protection against abuse. These cannot always be disabled without breaking the service.

If non-essential analytics, advertising pixels, or tracking embeds are enabled, we will provide appropriate information and obtain consent where required before using them. Third-party media or links may connect to services with their own cookies and policies.

You can control cookies through your browser. Blocking essential cookies may prevent sign-in or account functions.

Your rights

Subject to applicable law, you may have the right to:

- access your personal data;

- correct inaccurate or incomplete data;

- request deletion;

- restrict processing;

- receive portable data;

- object to processing based on legitimate interests or to direct marketing;

- withdraw consent;

- complain to a data-protection authority.

To exercise a right, email theaitrepreneur@gmail.com. We may need to verify your identity. You may complain to the supervisory authority in your country of residence.

Security

We use reasonable technical and organizational safeguards, including reputable providers, access controls, encrypted connections, two-factor authentication for administrator accounts, backups, and restricted staff access. No online service can guarantee absolute security.

Children

Aitrepreneur is not directed to children and is not intended for anyone who cannot legally consent to the relevant data processing or enter the applicable contract without a parent or guardian. Contact us if you believe a child supplied personal data improperly.

Changes

We may update this policy when services, providers, or laws change. The effective date will be updated, and material changes will be communicated where required.