Privacy Policy

DRAFT — not legal advice; have a lawyer review. Version: draft-2026-10-27.

This policy explains how Alpha Lion Enterprises LLC ("we", "us"), 2035 W Monte Cristo Ave, Phoenix, AZ 85023, USA, handles personal information for The Creator Funnel (thecreatorfunnel.com).

1. Who this policy covers

• Creators and their team members who sign up for, or are invited to, The Creator Funnel.
• People who start signing up but do not finish.
• Visitors to thecreatorfunnel.com and people who contact us there.

It does not cover the visitors, subscribers or customers of a creator's own site. Each creator decides what to collect about their own audience and is responsible for it (the creator is the "controller"). We only host and process that data on the creator's behalf (we are the "processor"), under our Data Processing Agreement. If you are on a creator's email list or bought from a creator, please read that creator's privacy policy and contact them first.

2. What we collect

When you sign up or use your account:

• First name, last name, email address and password (stored only as a secure hash). If you use "Continue with Google", we receive your Google account ID and verified email address from Google.
• Your workspace name, site address (subdomain), custom domains and settings.
• Two-step login details (an encrypted secret and recovery codes).
• Your record of accepting our legal documents: which version, the time, your IP address and browser details.
• Your choice about marketing email: whether you ticked the optional box, the wording you saw, the time and your IP address.

Billing:

• Our payment provider, Stripe, collects your card and billing details. We do not see or store your full card number. We keep your Stripe customer ID, your plan, your subscription status, invoices, the card type and its last four digits, and any coupon you used.

When you use the dashboard:

• Activity and security records, such as sign-ins, setting changes, key changes, exports and deletions, with IP address and browser details.
• The keys you connect for other services (Stripe, Resend, OpenRouter and so on). These are encrypted and are never shown in full again after you save them.
• Technical logs and error reports. We design these to leave out secrets and full email addresses.

When you contact us: your name, email address and the messages and attachments you send through our contact form or by email reply.

When you visit thecreatorfunnel.com: basic technical information (IP address, browser, pages viewed, the address you came from). We do not use advertising pixels on thecreatorfunnel.com. If we use website analytics, it runs only after you accept it in our cookie banner (see section 6).

3. Why we use it

• To provide the Service: create and secure your account, host your sites, process your subscription, and give you support. (For people in the EU or UK: performance of our contract with you.)
• To keep the Service safe: prevent fraud, abuse, spam and attacks; enforce our Terms and Acceptable Use Policy; keep audit logs. (Legitimate interests.)
• To send you service emails: verification, receipts, trial reminders, payment problems, account changes, export-ready notices and security notices. You cannot opt out of these while you have an account, because they are needed to run it.
• To send you marketing email, only if you ticked the optional "Send me tips and offers" box. You can unsubscribe at any time with the link in each email. (Consent.)
• Unfinished sign-ups: if you start signing up but do not finish, we keep your first name, last name and email address. If you did not tick the marketing box, we send you at most one reminder to finish setting up your account, and nothing else. (Legitimate interests.)
• To meet legal obligations, such as tax and accounting records. (Legal obligation.)

We do not sell your personal information, and we do not share it for targeted advertising. If we ever add advertising pixels, we will update this policy first, and add a "Do not sell or share my personal information" option and support for Global Privacy Control (GPC) signals, before they are used.

4. Who we share it with

We use these service providers ("sub-processors") to run The Creator Funnel. They may only use your information to provide their service to us.

Services you connect yourself are not our sub-processors. Each creator chooses and contracts directly with their own Stripe, Resend, OpenRouter, analytics, pixel, Turnstile and YouTube accounts. We pass data to them only because, and as, the creator has set them up.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger, sale or reorganisation of our business (under the same protections).

5. AI features

When a creator uses the AI writer or AI product builder, the prompt (brand settings, product details, existing page text, the creator's instructions, and any reference files, images or video links the creator adds) goes to OpenRouter and the model the creator chose, under the creator's own OpenRouter account. We never include subscriber, customer or help-desk data in those prompts.

6. Cookies

We use cookies that are needed for the Service to work: to keep you signed in, protect forms (CSRF tokens and Cloudflare Turnstile), remember security choices and keep your session safe. Our sign-in cookies are secure and cannot be read by scripts.

We do not use advertising cookies or pixels. Wherever we use website analytics, our cookie banner is switched on and analytics cookies load only after you accept them; you can decline, and the site works just as well. If we ever add advertising pixels, we will update this policy, with a "Do not sell or share" opt-out and Global Privacy Control support, before they are used.

7. How long we keep it

• Your account: while it is open. After a subscription ends, workspaces are kept for 30 days so you can come back or export your data, then deleted.
• Unfinished sign-ups: the unfinished account is deleted after 7 days. Your name and email address are kept as a lead until you unsubscribe or ask us to remove them, and for no longer than 24 months from your last activity.
• Backups: encrypted nightly backups are kept for 30 days, then deleted.
• Orders, invoices, billing and tax records: 7 years.
• Records of legal acceptance and consent: for as long as your account or contact record exists, plus 5 years, so we can show what you agreed to.
• Security and audit logs: 12 months.
• Messages to our help desk: 3 years after the ticket is closed.
• A short record that a workspace was deleted: kept after deletion.

8. Security

We protect information with encryption in transit (HTTPS), encrypted secret keys (each workspace has its own encryption key), encrypted backups, two-step login for account Owners and our staff, strict separation between workspaces, a server that only accepts traffic through Cloudflare, key-only server access, regular security updates and audit logs. No system is perfectly secure, but we work to keep your information safe and will tell you if a breach affects you, as the law requires.

9. Your choices and rights

• Marketing: unsubscribe at any time with the link in any marketing email.
• Your data: you can see and update most account details in the dashboard, and download a full export of your workspace from the Data screen.
• Requests: you can ask us to show you, correct, delete or export the personal information we hold about you, or to stop using it for a purpose. Depending on where you live (for example in California and other US states with privacy laws, or in the EU or UK), you may have these rights by law. We will not treat you differently for using them.
• Remove a lead record: if you started signing up and want us to remove your name and email, ask us through the contact form.
• To make a request, use the contact form at thecreatorfunnel.com. We may need to confirm your identity first. We aim to reply within 30 days [TO CONFIRM]. If you are in the EU or UK, you can also complain to your local data protection authority.

If you are a subscriber or customer of a creator's site, send your request to that creator. If you contact us instead, we will pass it on to them.

10. International transfers

We are based in the United States, and the Service runs on servers in [TO CONFIRM: data-centre location of the Hostinger VPS]. Our email provider, Resend, processes email in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States and in other countries where our providers work. We accept creators and customers from the European Union and the United Kingdom. Where EU, UK or Swiss law requires a safeguard for these transfers, we use the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum (see our Data Processing Agreement for creator data).

EU/UK representative: [TO CONFIRM if required].

11. Children

The Creator Funnel is for adults running a business. It is not meant for anyone under 18, and you must be at least 18 to create an account. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy. Each update is published as a new version, and account holders are asked to accept it the next time they sign in.

13. Contact

Alpha Lion Enterprises LLC
2035 W Monte Cristo Ave, Phoenix, AZ 85023, USA
Contact form: thecreatorfunnel.com/contact [TO CONFIRM: final contact page address.]