Privacy Policy

The short version: we ask for your email address so we can send you the books you requested. We do not sell your data, we do not run advertising trackers on this site, and we never see your card number.

Rubedo Ventures, LLC is the controller of your personal information.
100 Hay Street, Suite 704, PMB 1034, Fayetteville, NC 28301, United States
Contact: [email protected]
Effective: upon publication

1. What we collect

• Your email address — when you request the free Book One, or when you purchase. This is the only information we ask you for directly.
• Purchase records — what you bought, when, the amount, the transaction reference, and the country and IP address associated with the transaction. These are created and held by Paddle, the seller of record on your transaction.
• Your entitlement and delivery record — we keep our own small record of each completed purchase so we can deliver the books and re-deliver them if you ask. It holds the Paddle transaction reference, your email address, which books the purchase entitles you to, the download links issued to you, and when each one was used. It is stored on Cloudflare’s infrastructure and contains no payment details.
• Email engagement — whether our emails were delivered, opened, and which links were clicked, recorded by our email provider.
• Support correspondence — anything you send us by email, and our replies.
• Server logs — our host records standard request data, including IP address, browser type, and pages requested, for security and abuse prevention.

We never receive or store your card number. Payment details are entered directly into our payment processor's own hosted checkout page and never reach our systems.

2. Why we use it, and our legal basis

Where the UK or EU GDPR applies, our legal bases are as follows:

• To deliver what you asked for — sending the books, providing support, re-delivering failed downloads. Basis: performance of a contract.
• To send you the free Book One and follow-up educational emails — only after you have confirmed your address through a double opt-in. Basis: consent, which you may withdraw at any time.
• To keep records for accounting and tax. Basis: legal obligation.
• To protect the business — preventing fraud and abuse, and defending against unfounded payment disputes using the delivery records described above. Basis: our legitimate interests in operating a business and preventing loss.
• To keep the site and mailbox secure. Basis: legitimate interests.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

3. Who processes it

We keep our supply chain deliberately small. Each provider receives only what it needs:

• Paddle.com Market Ltd — checkout, payment processing, tax and dispute handling, as merchant of record. Paddle is the seller on your transaction and receives your payment details directly; we receive only the resulting transaction record. Because Paddle sells to you in its own right, it acts as an independent controller of that transaction data, not merely as our processor.
• MailerLite (UAB “MailerLite”) — email list management and delivery, including the free Book One sequence.
• Cloudflare, Inc. — website hosting, DNS, network security, and storage of the entitlement and delivery record described in section 1.
• Zoho Corporation — our [email protected] mailbox, and therefore any correspondence you send us.

Each acts as our processor under contract and is bound to use your information only to provide its service to us. We may also disclose information where we are legally required to, or to establish or defend legal claims.

4. What we never do

We do not sell, rent, or trade your personal information. We do not share it with data brokers or advertising networks. We do not share it with anyone other than the processors named above, except where legally compelled.

For the purposes of US state privacy laws, including the California Consumer Privacy Act, we do not “sell” or “share” personal information, and we do not process it for cross-context behavioural advertising.

5. Cookies and tracking

This website sets no advertising cookies, no analytics cookies, and no third-party tracking pixels. There is no advertising network embedded in these pages.

Our payment processor sets cookies necessary to operate its own hosted checkout when you proceed to pay, and our email provider records delivery and click data as described above. Those are governed by their own policies.

6. International transfers

We are based in the United States, and our processors operate internationally. If you are in the United Kingdom or the European Economic Area, your information will be transferred to and processed in the United States and other countries.

Where such transfers occur, they are made under the safeguards our processors maintain for that purpose, which include the UK and EU Standard Contractual Clauses and, where applicable, certification under the EU–US and UK–US Data Privacy Framework. You may contact us for further information about the safeguards applying to a particular transfer.

7. How long we keep it

• Email address and marketing preferences — until you unsubscribe or ask us to delete you, after which we retain only a minimal suppression record so we do not email you again by mistake.
• Purchase and tax records — seven years, as required for accounting and tax purposes.
• Entitlement and delivery records — for as long as a payment dispute remains possible, and thereafter within the seven-year record above. Download links themselves do not expire.
• Support correspondence — up to two years, unless it relates to an ongoing matter.
• Server logs — retained by our host on its standard short-term cycle.

8. Your rights

Wherever you live, you may ask us to access, correct, or delete your personal information, and you may unsubscribe from marketing email at any time using the link in every message or by emailing us.

If you are in the UK or EEA, you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time without affecting processing already carried out, and to lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office.

If you are a California resident, you have the right to know what we collect and why, to request deletion or correction, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising those rights.

To exercise any right, email [email protected]. We will respond within 30 days and may need to verify your identity, normally by confirming you control the email address concerned. Two limits worth stating plainly: deleting your record cannot recall files already delivered to you, and we may keep the minimum transaction record the law requires us to hold.

9. Security

This site is served only over HTTPS. It is a static website with no user accounts, no login, and no customer database of its own, which means there are no stored credentials and no customer records here to breach. Your personal information resides with the established processors named in section 3, each of which maintains its own security programme. Internally, access is limited to the owner of the business.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant regulator where the law requires it.

10. Children

Our products are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes

If we change this policy we will update the effective date above, and for material changes we will notify subscribers by email.