Privacy Policy

We collect information you give us directly:

• Account information — your name, email address, and password. Passwords are stored only as a one-way cryptographic hash; we never see or store the password itself.
• Membership and payment information — the tier you choose, your subscription status, and payment records such as amount, date, and a transaction reference. Card details are entered on Stripe’s checkout page and are collected and stored by Stripe, not by AVSAS.
• Messages — your name, email address, and anything you write when you use our contact form or email us.

We also receive limited technical information automatically, such as your IP address, browser type, and the pages you request, which our hosting provider records in server logs for security and troubleshooting.

We use a single essential cookie to keep you signed in to your account. It contains a random session identifier and expires after 30 days or when you sign out. We do not use advertising cookies, analytics trackers, or third-party tracking pixels. Stripe may set its own cookies on its checkout page to process payments and prevent fraud.

• To create and secure your account and keep you signed in.
• To process membership purchases, renewals, and cancellations.
• To provide membership benefits, including onboarding, scheduling, and coaching.
• To respond to your messages and send service emails, such as account and payment confirmations.
• To prevent fraud, abuse, and security incidents, and to comply with legal obligations.

We share information only with service providers that help us operate the Services, and only as needed for that purpose:

• Stripe — payment processing and subscription billing. Membership payments are processed through the Stripe account of our affiliated company, A White Label Firm Inc., which may appear on your checkout page or receipt.
• Neon — database hosting, where account, membership, and message records are stored.
• Fly.io — website hosting.
• Resend — delivery of service emails.
• Google Fonts — the site’s typefaces are loaded from Google, which receives your IP address when fonts load.

We may also disclose information if required by law, to protect the rights and safety of AVSAS, our members, or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

We keep account information while your account is open. Payment and membership records are kept as long as required for tax, accounting, and legal purposes, typically up to seven years. Contact messages are kept as long as needed to respond and follow up. When information is no longer needed, we delete it or make it anonymous.

You can ask us to access, correct, download, or delete your personal information, or to close your account, by emailing info@theavsas.com from the address on your account. We will respond within the time required by applicable law, generally within 30 days, and will not treat you differently for exercising your rights.

Depending on where you live, including California and the European Economic Area, you may have additional rights, such as the right to know what categories of information we collect and why, to limit certain uses, or to lodge a complaint with a data protection authority. We will honor these rights as the law requires. Some records, such as payment history, may be kept after an account is deleted where the law requires it.

We protect information with encryption in transit (HTTPS), hashed passwords, access controls, and reputable infrastructure providers. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law.

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. Memberships must be purchased by an adult (18 or older). If you believe a child under 13 has given us personal information, contact us and we will delete it.

AVSAS is based in the United States, and our providers store and process information in the United States. By using the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

We may update this policy from time to time. If we make material changes, we will post the new version here with a new “Last updated” date and, where appropriate, notify members by email.