Privacy Policy
Effective August 19, 2026 · Last updated August 19, 2026
What we collect
We collect: your first and last name; email address; phone number; country and state/province; your profile photo if you upload one; payment information processed by Stripe (we receive only the card brand, last four digits and Stripe identifiers — never the full card number, security code or expiry); the messages, reactions and content you post in the community; your course purchases and lesson progress; and usage data such as IP address, browser user agent, and pages visited.
Why we collect it
To create and secure your account, process membership and course payments, deliver the community and course experience, provide support, meet legal and record-keeping obligations, and improve the service.
Phone numbers are used to contact members by text message, voice call, ringless voicemail, and automated or AI-assisted calls where consent has been given. We record each consent choice — including the exact disclosure text you were shown, the date and time, and the IP address it came from — so your preferences are honored and provable.
Mobile opt-in information and consent are not shared with, sold to, or rented to any third parties or affiliates for their marketing purposes.
Who we share data with
We share data only with the service providers that run this business, and only so they can perform their service for us — never for their own marketing:
- Stripe — payment processing and billing.
- Our SMS/voice messaging provider — delivery of texts, calls and voicemail.
- Our email provider — transactional and marketing email delivery.
- Our hosting and database provider — application hosting and data storage.
We may also disclose information where required by law, or to protect the rights and safety of our members.
How to opt out
Reply STOP to any marketing text to opt out, or HELP for help. Manage each channel individually in your communication preferences, or opt out without logging in at /unsubscribe. Transactional messages about your account, billing and membership continue either way.
Deleting your data
Email privacy@sisletswin.com to request access to, correction of, or deletion of your personal data. We respond within 30 days.
Data retention
We keep account and community data for as long as your account is active. After closure we delete or anonymize personal data within 90 days, except records we are required to keep: billing and tax records, and consent records, which we retain for at least four years as proof of your communication preferences.
Security
Data is encrypted in transit and at rest. Access is restricted by row-level database policies so members can only reach their own records, admin access is limited and audited, and card data never touches our servers.
Children's privacy
Sis Lets Win is an 18+ service. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.
California and other state privacy rights
If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what personal information we hold, request a copy, request correction or deletion, and opt out of targeted advertising or any sale or sharing of personal information. We do not sell or share personal information, and we never sell or share mobile opt-in data. Exercise any of these rights by emailing privacy@sisletswin.com. We will not discriminate against you for doing so.