Privacy Policy

Effective 5 September 2026.

The short version

We collect what you give us and what your browser sends, we use it to sell to you and deliver what you bought, and we share it only with the companies that run our payments, email, CRM, hosting and advertising. If you connect a business system to our scan we read it and never write to it. Email us and we will delete you.

1. What we collect

What you give us: your name, email address, business name, and what you tell us in an assessment, a form or a call. If you buy, our payment processor collects your card details. We never see or store a full card number.

What comes automatically: your IP address, browser and device, the pages you visit here, and how you arrived. This comes from cookies and similar tags, including an advertising tag described below.

What your business systems hold, if you connect them: described in the next section.

2. Data your business connects to the scan

If you buy the Revenue Leak Scan or a product built on it, you choose which systems to connect. Those may include your payment processor, your CRM, your ad account, and records that a call happened. That data can include your own customers' names, email addresses and payment history.

Three things are true about it and stay true. Our access is read-only: we can read, and we cannot move money, change anything or contact your customers. We use it only to produce your report and run the product you bought, never to sell to anyone else and never to build a list. And you can disconnect a source at any time, after which we stop reading it.

For that data you are the one deciding what happens to it and we act on your instructions. You are responsible for having the right to connect it.

3. Why we use it

To take payment and deliver what you bought. To give you access to the community you paid for. To answer you. To send you the emails you agreed to. To measure which ads work. To keep the site secure and to meet our legal and tax obligations.

4. Who else touches it

Stripe processes payments. Resend sends our email. GoHighLevel is our CRM and holds contact records. Meta receives advertising measurement events, described below. Vercel hosts the site. The community platform hosts the group and receives your email address so it can send your invitation when you buy a membership. Each is given only what it needs to do its job.

We do not sell your personal information. We may disclose it if the law requires it, or to protect our rights, or to a buyer if the business is ever sold, in which case this policy follows the data.

5. Advertising and measurement

We run ads and use an advertising pixel and a server-side events connection to tell whether an ad led to a visit or a purchase. That means an advertising platform receives events such as a page view or a purchase, along with identifiers such as a hashed email address. You can limit this through your own ad settings on that platform and through your browser's cookie controls.

6. Email, and how to stop it

If you buy or opt in, we email you. Every marketing email we send identifies itself as an advertisement, carries a working unsubscribe link, and shows our postal address, which is what federal law requires (15 USC 7704). Unsubscribing stops the marketing. It does not stop the emails you need in order to use something you are paying for, such as a receipt, a booking confirmation or a notice about your subscription.

7. How we protect it, and what happens if something goes wrong

We take reasonable measures to protect personal information held in electronic form, which Florida law requires of us (Fla. Stat. 501.171). In practice that means access is limited to the people who need it, connections are encrypted, and credentials are held in a secrets store rather than in code.

If there is a breach of security affecting your personal information, we will tell you as quickly as we practically can and without unreasonable delay. If a breach affects 500 or more people in Florida we must also notify the Florida Department of Legal Affairs within 30 days of determining it happened. If it affects more than 1,000 people we must also notify the nationwide credit reporting agencies. Those duties come from the same statute and we state them here so you know what to expect from us.

8. How long we keep it

Contact and purchase records are kept while you are a customer and afterwards for as long as we need them for tax, accounting and dispute purposes. Data you connected to the scan is kept while you use the product and is deleted on request. {{data_retention_period}}

9. Your choices

Email support@brainvaultai.com and we will tell you what we hold about you, correct it, or delete it. We will do this whether or not a law compels it. If deleting something would break a service you are still paying for, or if we have to keep a record for tax reasons, we will say so plainly rather than quietly keeping it.

To be straightforward about the law here: Florida's Digital Bill of Rights creates a set of consumer data rights, but it only reaches companies with more than one billion dollars in global annual revenue. It does not apply to this business, so we are not going to describe rights under it that you do not have. What we offer above we offer as a matter of practice.

10. Children

This is a business-to-business site and is not intended for children. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

11. Where data is held

We operate in the United States and our providers store data in the United States. If you are outside the United States, using this site means your information is handled there.

12. Changes

We may update this policy. The effective date at the top changes when we do, and a material change gets an email to customers rather than a silent edit.

13. Contact

support@brainvaultai.com, or Sheridan St Of Florida LLC at 1065 Southwest 8th Street, #1197, Miami, FL 33130.

This policy describes real practice and cites real law. It is not legal advice and it has not yet been reviewed by an attorney.