Privacy Policy

[Business Name], [Registered Address], [Country], is responsible for personal data collected through The Assembled Growth Hub. Contact: [privacy@yourdomain.com].

• Account details — name, email address, and password (stored only as a secure hash, never in readable form).
• Membership and billing details — subscription status, plan, renewal dates, and invoice history. Card details are handled by our payment processor; we never receive or store full card numbers.
• Usage data — which resources you view, save, copy, or download, and searches you run inside the library.
• Support messages — anything you send us through the contact form or by email.
• Technical data — IP address, browser type, device type, and log data collected automatically when you use the site.

• To create and operate your account and give you access to the library
• To take payment and manage your subscription
• To provide support and answer your questions
• To understand which resources are useful so we can improve the library
• To keep the service secure and prevent misuse
• To send service messages about your account, billing, or important changes

[Placeholder — if your jurisdiction requires a stated legal basis for each purpose, add it here and have it reviewed.]

We send service and account emails as part of running your membership. Any marketing email is separate: you can opt out at any time using the unsubscribe link or from your account settings, and opting out will not affect your access.

We do not sell personal data. We share data only with service providers that help us operate: [payment processor], [hosting and database provider], [email provider], and [analytics provider, if used]. Each processes data on our instructions.

We may also disclose data where required by law or to protect our legal rights.

We use cookies that are necessary for the site to function, including keeping you signed in. [Placeholder — list any analytics or marketing cookies you use and describe how consent is obtained, if required in your jurisdiction.]

Account data is kept while your account exists. If you delete your account, we remove or anonymize your personal data within [30] days, except records we are legally required to retain — typically billing and tax records for [7] years.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, or complain to a data protection authority. Email [privacy@yourdomain.com] and we will respond within [30] days.

We use encryption in transit, hashed passwords, access controls, and row-level database permissions so that members can only read their own account data. No system is completely secure, but we take reasonable steps to protect your information and will notify you of a breach where required by law.

[Placeholder — state where data is stored and processed, and what safeguards apply to any transfers outside your region.]

The service is intended for business use by adults. We do not knowingly collect data from anyone under [16].

If we make a material change to this policy we will notify members by email or in the app before it takes effect.