ConvertMinded Privacy Policy

Last Updated: July 2025

Your Privacy Matters to Us

At ConvertMinded, we believe in complete transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices in plain English, because you deserve to understand exactly what happens with your information.

The Short Version: We collect only what’s necessary to deliver our products and improve our services. We never sell your personal data. We respect your choices and make it easy to control your information.

Information We Collect

Information You Provide Directly

When You Create an Account:

• Full name (or initials/pseudonym if you prefer)
• Email address (required for product delivery)
• Password (encrypted using bcrypt)
• Date of birth (to verify you’re 18+)
• Country (only for purchasers, for tax compliance)

When You Make a Purchase:

• Billing information (processed by Stripe/PayPal – we don’t store card numbers)
• Billing address
• Transaction history
• Product licenses

When You Contact Us:

• Support inquiries
• Testimonials and success stories (with explicit consent)
• Feedback and suggestions
• Refund requests

Optional Information:

• Company name
• Website URL
• Affiliate marketing experience level
• Survey responses

Information Collected Automatically

When You Visit Our Site:

• IP address (anonymized after 7 days)
• Browser type and version
• Operating system
• Referring website
• Pages visited and products viewed
• Time spent on pages
• Clicks and interactions
• Device information

Through Cookies:

• Session data
• Preference settings
• Analytics data
• Affiliate link clicks
• See our Cookie Policy for details

Key Cookie Types:

• Essential: Login sessions, cart functionality
• Analytics: Google Analytics (anonymized)
• Marketing: Only with your consent
• Affiliate: Tracking for commission attribution

Information from Third Parties

Payment Processors:

• Transaction confirmation
• Fraud check results (pass/fail only)
• Refund processing status

Analytics Services:

• Aggregated usage patterns
• Traffic sources
• Conversion data (no personal data)

How We Use Your Information (Legal Basis Included)

To Deliver Our Services

Essential Uses – Legal Basis: Contract Performance

• Process your orders and deliver digital products
• Create and manage your account
• Send transaction receipts and confirmations
• Provide customer support
• Process refunds
• Verify you’re 18+ for legal compliance

Example: When you purchase Affiliate Arsenal 2025, we use your email to send download links and your name to personalize your account.

To Improve ConvertMinded

Quality Enhancement – Legal Basis: Legitimate Interest

• Analyze usage patterns to improve products
• Test new features with anonymized data
• Fix bugs and technical issues
• Understand which content helps most
• Develop new products based on needs

Example: If we see users spending 10 minutes on a confusing page, we’ll redesign it for clarity.

Your Rights: You can object to processing based on legitimate interest at any time.

To Communicate With You

Transactional Emails – Legal Basis: Contract Performance

• Purchase confirmations
• Account security alerts
• Product updates you’re entitled to
• Support responses

Marketing Emails – Legal Basis: Consent

• New product announcements
• Affiliate marketing tips
• Special offers
• Success strategies

How You Consent:

• ☐ Checking the box at signup (never pre-checked)
• ☐ Subscribing via our blog forms
• ☐ Opting in after purchase

Withdrawing Consent: Click unsubscribe in any email or email support@convertminded.com

To Protect Everyone

Security & Legal – Legal Basis: Legal Obligation & Legitimate Interest

• Prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect intellectual property
• Maintain platform security
• Age verification compliance

Behavioral Analysis and Profiling

Legal Basis: Legitimate Interest (with right to object)

We analyze your behavior to:

• Recommend relevant products based on pages viewed
• Send targeted content (only with email consent)
• Improve our product selection
• Identify popular content areas

Important: We do NOT use automated decision-making that significantly affects you. All major decisions (like refunds) involve human review.

How We Share Information

We NEVER Sell Your Personal Data

This is non-negotiable. Your information is not for sale. Period.

Service Providers We Work With

We share limited information with trusted services that help us operate:

Payment Processing:

• Stripe and PayPal – Handle transactions securely
• Data Shared: Name, email, transaction amount
• Their Policies: Stripe Privacy | PayPal Privacy

Email Delivery:

• ConvertKit – Manages email communications
• Data Shared: Email, name, consent status
• Their Policy: ConvertKit Privacy

Website Infrastructure:

• Amazon Web Services (AWS) – Hosts our website
• Cloudflare – CDN and security
• Data Shared: Encrypted user data, access logs
• Security: SOC 2 compliant, encrypted in transit and at rest

Analytics:

• Google Analytics – Understands site usage
• Data Shared: Anonymized browsing behavior
• Opt-out: Google Analytics Opt-out

Customer Support:

• Intercom – Manages support tickets
• Data Shared: Email, name, support history
• Retention: 1 year after last interaction

All service providers are bound by data processing agreements, ensuring your data protection.

Legal Requirements

We may disclose information if required by:

• Court orders or subpoenas
• Law enforcement investigations
• To protect safety of users
• To prevent fraud or abuse
• To enforce our legal rights

We’ll notify you if legally permitted.

Business Transfers

If ConvertMinded is acquired or merges:

• You’ll be notified 30 days before transfer
• Same privacy protections would apply
• You can request data deletion before transfer
• No data transfer without notification

Aggregated Data

We share non-personal statistics publicly:

• “73% of members reach $1K/day in 90 days”
• “Average member implements 5 products”
• “2.4% average conversion rate”

This never identifies individuals.

International Data Transfers

ConvertMinded LLC is based in Wyoming, USA. If you’re outside the US:

Your Data May Be Transferred To:

• United States (primary servers)
• Countries where our service providers operate

Transfer Safeguards:

• EU/UK Users: Standard Contractual Clauses (Module 2 – Controller to Processor)
• Service Provider Agreements: All vendors sign data processing agreements
• Security Requirements: All transfers encrypted

Note: Privacy Shield is no longer valid. We use Standard Contractual Clauses approved by the European Commission.

By using ConvertMinded, you acknowledge these transfers.

Your Privacy Rights

Universal Rights (All Users)

Access Your Data

• Request copy of all your information
• Delivered within 30 days
• Format: PDF or CSV

Correct Your Data

• Update incorrect information
• Change account details anytime
• Email us for help

Delete Your Data

• Request complete account deletion
• Some records kept for legal compliance:
  • Transaction records (7 years – tax law)
  • Legal communications (as required)

Download Your Data (Portability)

• Export in machine-readable format
• Includes: Profile, purchases, preferences
• Excludes: Internal notes, security logs

Restrict Processing

• Pause marketing communications
• Limit analytics tracking
• Maintain account access

GDPR Rights (European Union)

Additional Rights for EU Residents:

Object to Processing

• Object to legitimate interest processing
• Opt-out of profiling for marketing
• We’ll stop unless compelling legitimate grounds

Lodge a Complaint

• First: Contact us at support@convertminded.com
• Then: Your local supervisory authority:
  • UK: Information Commissioner’s Office (ICO)
  • Ireland: Data Protection Commission (DPC)
  • Germany: BfDI
  • Full list of EU authorities

Automated Decision Rights

• We don’t make automated decisions that significantly affect you
• All refund decisions involve human review

CCPA Rights (California)

Know What’s Collected Categories we collect:

• Identifiers (name, email)
• Commercial information (purchases)
• Internet activity (browsing)
• Inferences (product interests)

Financial Incentives

• We don’t offer discounts for data
• All users get equal access to free content
• No discrimination for privacy choices

“Do Not Sell” – Not Applicable

• We don’t sell personal information
• We don’t share for behavioral advertising

Data Security

How We Protect Your Information

Technical Measures:

• TLS 1.3 encryption for all transfers
• Bcrypt password hashing (cost factor 12)
• Web Application Firewall (WAF)
• Regular security scanning
• Access logging with alerts

Operational Measures:

• Role-based access control
• Annual security training
• Vendor security assessments
• Incident response plan
• Penetration testing annually

Physical Measures:

• SOC 2 compliant data centers
• Encrypted backups (AES-256)
• Disaster recovery plan
• Geographic redundancy

Data Breach Response

If a breach occurs affecting your data:

1. Notification within 72 hours via:
   • Email to affected users
   • Website banner for major breaches
   • Details of what happened
   • Steps we’re taking
   • Actions you should take
2. Information Provided:
   • Nature of the breach
   • Data types affected
   • Potential consequences
   • Protective measures taken
   • Contact for questions
3. Your Actions:
   • Change password immediately
   • Monitor accounts
   • Contact us with concerns

Breach History: No breaches to date (updated quarterly)

Your Security Responsibilities

• Use strong, unique passwords
• Enable two-factor authentication (when available)
• Don’t share login credentials
• Report suspicious activity to support@convertminded.com

Data Retention

We follow data minimization principles:

Account Data

• Active as long as account exists
• Deleted 30 days after closure request
• Anonymized for analytics after deletion

Purchase Records

• 7 years for tax/legal compliance
• Minimal data: Date, amount, product
• Stored separately from profile

Email Communications

• Marketing: Until unsubscribe
• Support: 1 year after resolution
• Transactional: 7 years (legal requirement)

Analytics Data

• IP addresses: Anonymized after 7 days
• Behavior data: 2 years
• Aggregated data: Indefinite

Testimonials

• Until withdrawal of consent
• Immediately removed upon request
• Archived versions deleted

After Refund:

• License revoked immediately
• Marketing emails stopped
• Account deleted after 30 days
• Transaction record kept (legal requirement)

Children’s Privacy

ConvertMinded is strictly for adults (18+)

Age Verification:

• Date of birth required at signup
• Calculated age must be 18+
• Accounts under 18 automatically rejected

If We Discover a Minor’s Account:

1. Immediate account suspension
2. Data deletion within 24 hours
3. Parent notification if contact available
4. No data retention

Parents: If your child created an account, email support@convertminded.com immediately.

Why 18+?

• Affiliate marketing requires legal contracts
• Financial transactions need adult consent
• Content designed for adult business owners

Marketing Communications

Email Marketing Practices

Consent Collection:

• ☐ Explicit checkbox at signup (never pre-checked)
• ☐ Double opt-in confirmation
• ☐ Clear consent language
• ☐ Separate consent for different types

What We Send:

• Product updates (2-3 per month)
• Marketing tips (1-2 per week)
• Special offers (1-2 per month)
• Never more than 1 per day

Your Controls:

• Unsubscribe link in every email
• Preference center for topic selection
• Pause emails temporarily
• Full opt-out anytime

We Promise:

• CAN-SPAM compliant
• Clear sender identification
• Honest subject lines
• Physical address included

Cookies and Tracking Technologies

Summary of Cookie Use:

• Essential: Keep you logged in
• Analytics: Understand usage (anonymized)
• Marketing: Only with consent
• Affiliate: Track commission sources

For full details, see our Cookie Policy.

Managing Cookies:

• Browser settings control
• Our cookie preference center
• Google Analytics opt-out available

Third-Party Services

Complete Service Provider List

Payment & Commerce:

• Stripe – Payment processing
• PayPal – Alternative payments
• Data: Transaction details only

Infrastructure:

• Amazon Web Services – Hosting
• Cloudflare – CDN/Security
• Data: Encrypted user data

Marketing & Analytics:

• ConvertKit – Email marketing
• Google Analytics – Usage analytics
• Hotjar – User experience insights
• Data: Behavioral data (anonymized)

Support:

• Intercom – Customer support
• Typeform – Surveys (optional)
• Data: Communications only

Affiliate Networks (Cookie-based tracking only):

• Amazon Associates
• ShareASale
• ClickBank
• CJ Affiliate
• Impact

All providers have appropriate data protection agreements.

Your Choices and Controls

Privacy Control Center

Account Dashboard Options:

• Download your data
• Update privacy preferences
• Manage email consent
• Request deletion
• View consent history

Communication Preferences

• Marketing emails: Opt-in/out anytime
• Transactional only mode
• Frequency controls
• Topic preferences

Tracking Controls

• Analytics opt-out
• Cookie preferences
• Do Not Track: We honor browser settings

Data Requests

How to Submit: Email: support@convertminded.com Subject: “Privacy Request – [Type]”

Include:

• Request type (access/delete/correct/etc.)
• Account email
• Preferred format

Response Timeline:

• Acknowledgment: 48 hours
• Simple requests: 7 days
• Complex requests: 30 days maximum

Special Provisions

Testimonials and Success Stories

How We Use Them:

• Only with explicit written consent
• Right to withdraw anytime
• Edited only for length/clarity
• Original meaning preserved

Your Controls:

• Approve before publication
• Request removal anytime
• No obligation to provide

Data Processing for Refunds

What Happens:

1. Refund processed to original payment
2. License access revoked
3. Marketing emails stopped
4. Account deleted after 30 days
5. Transaction record retained (tax law)

You Can Still:

• Access transaction history
• Contact support
• Purchase other products

Changes to This Policy

Update Process:

1. Review quarterly for accuracy
2. Legal review for major changes
3. 30-day notice for material changes
4. Email notification to active users

How to Know:

• “Last Updated” date at top
• Update log available
• Email for significant changes
• Banner notice on site

Your Options:

• Continue using = acceptance
• Disagree = contact us for options
• Export data before changes

Contact Us

Privacy-Specific Contacts

General Privacy Questions: Email: support@convertminded.com Subject: “Privacy Question”

Data Requests (Access/Delete/Correct): Email: support@convertminded.com Subject: “Privacy Request – [Type]”

Report a Concern: Email: support@convertminded.com Subject: “Privacy Concern”

Response Commitment:

• Acknowledge: Within 48 hours
• Resolve: Within 30 days
• Complex issues: Regular updates

Mailing Address: ConvertMinded LLC
Attn: Privacy
1309 Coffeen Avenue STE 1200
Sheridan, WY 82801
United States

Data Protection Contact: While not required to have a DPO, privacy inquiries are handled by: Privacy Team – support@convertminded.com

Final Thoughts

We built ConvertMinded to help affiliate marketers succeed with data-driven strategies. That same commitment to data integrity guides our privacy practices:

• Minimal Collection: Only what’s needed
• Purpose Limitation: Used only as described
• Transparency: Clear about our practices
• User Control: Your data, your choices
• Security First: Protected at every step

Your trust enables our mission. We earn it daily through responsible data practices.

Questions? We’re here to help at support@convertminded.com

This Privacy Policy is incorporated into and subject to our Terms of Service.

For California residents: See our CCPA Notice for additional details.

For EU residents: See our GDPR Notice for additional details.