Privacy Policy

1. Scope

This Policy applies to personal information collected through the Site and Services, through our marketing activities (including events, SMS, and email), and through our interactions with prospective and current Members, subscribers, participants, and website visitors. It does not apply to data practices of third parties we do not own or control, even if their services are linked to or integrated with ours. For third-party sites and services, consult their own privacy policies.

2. Who We Are (Controller)

For the purposes of applicable data-protection laws (including the EU/UK GDPR and U.S. state privacy laws), the controller (or equivalent) of your personal information is:

Modern-Amenities, LLC
d/b/a AI Operators Collective
8 The Green, Suite A
Dover, DE 19901, USA
Email: support@aioperatorcollective.com

3. Information We Collect

a. Information You Provide

• Account & profile: name, email address, phone number, company name, job title, professional background, profile photo, time zone, and password (hashed).
• Billing: billing name and address, last 4 digits of payment card, card brand, expiration, and transaction history. Full card numbers are processed by Stripe; we do not store them.
• Forms & interactive tools: responses to AI Readiness Quiz, ROI Calculator, Website Audit, Stack Configurator, Opportunity Audit, Executive Ops Audit, contact forms, surveys, application forms, and scheduling forms.
• Member Win Reports: business contact info, client business type and industry, problem or operational challenge, AI solution deployed, measurable outcomes, and qualitative observations you voluntarily submit.
• Community content: posts, comments, messages, reactions, uploaded files, testimonials, and feedback.
• Communications: emails, SMS, support tickets, chat messages, and call recordings or transcripts when you interact with us.
• Event & coaching participation: attendance, participation in group calls and Q&A sessions, recordings (video, audio, chat).

b. Information Collected Automatically

• Device & technical data: IP address, device type, operating system, browser type, browser language, screen resolution, and unique device identifiers.
• Usage data: pages viewed, links clicked, referring URL, entry/exit pages, time and date of access, session duration, scroll depth, and error logs.
• Location: approximate geographic location derived from IP address.
• Marketing attribution: UTM parameters, click IDs, and referring campaign data.
• Cookies & similar technologies: see Section 8.

c. Information from Third Parties

• Authentication and identity providers (e.g., Clerk) when you sign in using those services.
• Payment processors (e.g., Stripe) for billing and fraud prevention.
• CRM and marketing platforms (e.g., Close) for lead-source and engagement data.
• Analytics providers and advertising partners.
• Referral partners who refer you to us.
• Publicly available sources and social media profiles you make public.

d. Sensitive Information

We do not intentionally collect sensitive personal information (such as government IDs, precise geolocation, health information, biometric data, or financial account numbers). Please do not submit sensitive information through the Services unless required for a specific feature and expressly requested.

4. How We Use Your Information

We use personal information to:

• Provide, operate, maintain, secure, and improve the Services;
• Create, authenticate, and manage your account;
• Process payments, subscriptions, renewals, refunds, and chargebacks;
• Deliver curriculum, coaching, events, community, and benchmarking features;
• Personalize content and recommendations;
• Communicate with you, including transactional messages, service announcements, policy updates, onboarding, support replies, and security notifications;
• Send marketing communications by email, SMS, or otherwise with your consent (which you may withdraw at any time);
• Conduct research, analytics, benchmarking, trend analysis, and product development, including training machine-learning models in aggregated or de-identified form;
• Generate anonymized proof points, case studies, and program materials (attributed use requires your prior written consent);
• Measure and optimize advertising and marketing campaigns;
• Prevent, investigate, and address fraud, abuse, security incidents, and violations of our Terms;
• Comply with legal obligations, respond to lawful requests, and enforce our rights and agreements.

5. Legal Bases for Processing (EU/UK Users)

If you are located in the EU, UK, or EEA, we rely on the following legal bases:

• Contract: to provide the Services you requested and administer your account;
• Legitimate interests: to operate, secure, improve, and market our business, subject to your rights and interests;
• Consent: for certain marketing communications, SMS, non-essential cookies, and recording of calls (you may withdraw consent at any time);
• Legal obligation: to comply with applicable law, regulation, or legal process; and
• Vital interests / public interest: in rare cases where necessary to protect vital interests or perform a task in the public interest.

6. How We Share Information

We do not sell your personal information for monetary consideration. We share personal information only as described below.

a. Service Providers (Processors)

We share personal information with vendors that process data on our behalf under written agreements that restrict their use to providing services to us, including:

• Hosting & infrastructure: Vercel, Neon (Postgres)
• Authentication: Clerk
• Payments: Stripe
• Email delivery: Resend
• SMS delivery: our SMS provider and carriers
• CRM & sales automation: Close
• Community platform: Mighty Networks
• Analytics: Vercel Analytics and similar privacy-respecting analytics
• AI & enrichment providers: Anthropic, Google, Firecrawl, OpenAI (where used for specific features)
• Caching & rate-limiting: Upstash
• Link management & attribution: Dub.co
• Scheduling: our booking provider for calls (e.g., Cal.com or Calendly)
• Customer support: help-desk, ticketing, and internal collaboration tools

The list of processors may change. If you would like an up-to-date list, contact support@aioperatorcollective.com.

b. Affiliates

We may share personal information with affiliated entities under common ownership or control, subject to this Policy.

c. Advertising & Marketing Partners

We may share limited identifiers and event data with advertising partners to measure and optimize marketing campaigns. Under certain state privacy laws, some of these disclosures may constitute a “sale” or “sharing” of personal information. See Section 13 for your right to opt out.

d. Legal, Compliance & Safety

We may disclose personal information when we believe in good faith that disclosure is necessary to (i) comply with a law, regulation, subpoena, court order, or other legal process; (ii) enforce or apply our Terms and other agreements; (iii) protect the rights, property, or safety of AI Operators Collective, our Members, or the public; (iv) investigate or prevent fraud, abuse, or security incidents; or (v) respond to claims that content violates third-party rights.

e. Business Transfers

If we engage in a merger, acquisition, financing, reorganization, bankruptcy, receivership, dissolution, sale of all or a portion of our assets, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you (e.g., by posting a notice on the Site) if we become subject to different privacy practices as a result.

f. With Your Direction or Consent

We may share personal information with your consent or at your direction (for example, when you publish a post in the community or authorize an integration).

g. Aggregated & De-Identified Information

We may create and share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, for any lawful purpose, including benchmarking, research, marketing, and product development.

7. Member Win Reports & Benchmarking

If you submit Member Win Reports, we use the information to (a) generate aggregate benchmarks and collective insights; (b) refine Operator IP, frameworks, and curriculum; (c) produce anonymized proof-points and case studies; and (d) show you comparative analysis against anonymized collective data. Individually identifying details are never shared in a manner that could reasonably identify you or your client without your prior written approval. You are responsible for obtaining any necessary consent from your own clients before submitting data about them.

8. Cookies & Similar Technologies

We use cookies, pixels, SDKs, local storage, and similar technologies to:

• Strictly necessary: authenticate sessions, enable checkout, prevent fraud, and maintain security;
• Functional: remember your preferences and settings;
• Analytics: measure performance, usage, and errors;
• Marketing & attribution: measure the effectiveness of our campaigns and attribute conversions.

Most browsers let you control cookies through their settings. Blocking strictly necessary cookies may break core functionality. Where required by law, we will obtain consent before setting non-essential cookies.

9. Do Not Track & Global Privacy Control (GPC)

Browsers may transmit a “Do Not Track” signal. Because there is no industry consensus on how DNT should be interpreted, we do not respond to DNT. Where required by law (including California and other U.S. states that recognize Global Privacy Control), we will treat a valid GPC signal as a request to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising for the browser or device from which the signal is sent.

10. SMS / Text Messaging Privacy

If you opt in to SMS, we (and our SMS provider) will process your mobile number, opt-in record, and message metadata. We do not sell or share mobile phone numbers collected for SMS to third parties or affiliates for their own marketing. Carriers may apply message and data rates. You can opt out at any time by texting STOP. Full SMS program terms are in our Terms of Service.

11. Children’s Privacy

The Services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If we learn that we have collected personal information from a child, we will delete it promptly. If you believe we may have information from a minor, contact support@aioperatorcollective.com.

12. Your Privacy Rights (General)

Subject to applicable law and verification, you may request to:

• Access: receive a copy of the personal information we hold about you;
• Correct: correct inaccurate or incomplete personal information;
• Delete: delete your personal information, subject to legal retention requirements;
• Port: receive your personal information in a structured, commonly used, machine-readable format;
• Restrict or object: restrict or object to certain processing, including for marketing or legitimate interests;
• Withdraw consent: where processing is based on consent, withdraw it without affecting the lawfulness of processing prior to withdrawal;
• Opt out: unsubscribe from marketing emails via the unsubscribe link (or at /unsubscribe), opt out of SMS by texting STOP, and opt out of sales/sharing under state laws.

To exercise any right, email support@aioperatorcollective.com with sufficient detail for us to locate your records. We will respond within the period required by applicable law (generally 30 days). We may need to verify your identity before acting. We will not discriminate against you for exercising these rights.

13. U.S. State Privacy Rights (CCPA/CPRA, VA, CO, CT, UT, and other states)

Residents of California, Colorado, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws may have additional rights, including the rights to know, access, delete, correct, and port personal information; to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising; to opt out of certain profiling; and to limit the use of sensitive personal information. You may also designate an authorized agent to submit requests on your behalf.

California “Shine the Light” (Civil Code § 1798.83): California residents may request information about disclosures of personal information to third parties for direct-marketing purposes during the immediately preceding calendar year. We do not currently share personal information with third parties for their own direct marketing.

Notice of Financial Incentive: If we offer any price or service difference related to data practices (e.g., discounts for newsletter sign-up), we will describe the material terms and your right to withdraw at the point of collection.

No Sale of Sensitive PI; No Sale of Minors’ PI: We do not knowingly sell sensitive personal information or personal information of consumers under 16.

To submit a request or appeal a decision, email support@aioperatorcollective.com with “State Privacy Request” in the subject line.

a. Categories of Personal Information Collected & Disclosed (last 12 months)

• Identifiers: name, email, phone, account IDs, IP address — collected from you and automatically; disclosed to service providers (hosting, auth, email, SMS, payments, CRM, analytics).
• Customer records: billing name, payment-card metadata — collected from you; disclosed to payment processors.
• Commercial: purchase history, subscription status — collected from you and from Stripe; disclosed to service providers.
• Internet/network activity: usage data, interactions, device/browser info — collected automatically; disclosed to hosting and analytics providers.
• Geolocation (approximate): derived from IP — collected automatically; disclosed to hosting and analytics providers.
• Audio/visual: call recordings and photos you upload — collected from you; disclosed to hosting and collaboration providers.
• Professional/employment: company, role, industry — collected from you; disclosed to CRM and community platforms.
• Inferences: preferences, interests, engagement scores — derived by us; used internally and with analytics providers.

14. EU/UK (GDPR) Rights

If you are in the EU, UK, or EEA, you have the rights to:

• Access, rectify, or erase your personal data;
• Restrict or object to processing;
• Data portability;
• Withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal);
• Lodge a complaint with your local supervisory authority; and
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

We rely on appropriate safeguards for international data transfers, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, where applicable. Contact support@aioperatorcollective.com to obtain a copy of the relevant safeguards.

15. International Data Transfers

We are based in the United States and process personal information in the U.S. and in other countries where our service providers operate. Laws in these countries may differ from those in your country. Where required, we use appropriate legal mechanisms (such as Standard Contractual Clauses) to protect international transfers. By using the Services, you acknowledge the transfer and processing of your data in the U.S. and other jurisdictions.

16. Data Retention

We retain personal information for as long as necessary to deliver the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention:

• Account data: duration of your membership plus up to 24 months, unless longer retention is required or permitted by law;
• Billing records: at least 7 years for tax and accounting purposes;
• Support communications: up to 3 years;
• Marketing contacts: until you unsubscribe or 3 years of inactivity, whichever is earlier;
• Security logs: up to 2 years;
• Aggregated/de-identified data: indefinitely.

After the retention period, we will delete or anonymize personal information unless we are legally required to keep it.

17. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

• Encryption in transit (TLS) and at rest where feasible;
• Role-based access controls and least-privilege principles;
• Logging, monitoring, and intrusion detection;
• Background checks and training for personnel with access to sensitive data;
• Vendor due diligence and written data-protection terms with processors.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

18. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and applicable regulators without undue delay, in accordance with applicable law.

19. Automated Decisions & Profiling

We may use automated processing (including basic profiling for analytics, segmentation, fraud prevention, and personalization). We do not make decisions that produce legal or similarly significant effects based solely on automated processing. Where required by law, you may request human review of such decisions.

20. Third-Party Links, Tools & Integrations

The Services may link to or integrate with third-party websites, applications, payment processors, AI models, CRMs, calendars, and other tools. Those third parties operate under their own privacy policies. We are not responsible for their practices. Review their policies before providing personal information.

21. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date above reflects the most recent revision. If we make material changes, we will provide additional notice (for example, by email or a prominent notice on the Site). Your continued use of the Services after changes take effect constitutes acceptance.

22. Contact Us

For privacy questions, requests, or complaints:

Modern-Amenities, LLC
d/b/a AI Operators Collective
8 The Green, Suite A
Dover, DE 19901
Privacy: support@aioperatorcollective.com
Legal: support@aioperatorcollective.com
Support: support@aioperatorcollective.com

For unresolved complaints, EU/UK residents may contact their local data-protection authority. California residents may contact the California Privacy Protection Agency.