Privacy Policy

The short version: we ask for your email address so we can tell you when The Academy opens, and Whop handles your membership and payment. We use the Meta Pixel to measure our Instagram and Facebook ads, and it switches off if your browser sends Global Privacy Control. We don’t sell your data, and we never see your card number.

Rubedo Ventures, LLC is the controller of your personal information.
100 Hay Street, Suite 704, PMB 1034, Fayetteville, NC 28301, United States
Contact: [email protected]
Effective: upon publication

1. What we collect

• Your email address, when you join the waitlist or sign up for our emails. On this website, that’s the only information we ask you for directly.
• Membership and payment records, when you join The Academy: your Whop username and email, which plan you’re on, when you joined and renewed, the amounts, the transaction references, and the country and IP address tied to each payment. Whop creates and holds these as the merchant of record, and shows us what we need to run your membership.
• Course progress, such as which lessons you’ve finished and your quiz results, recorded by Whop so the course can track where you are.
• What you post in the community. Messages, trade reviews and prayer requests you post on Whop or Discord are visible to other members of that space. Please don’t post anything you wouldn’t want other members to see.
• Referral records, if you take part in the referral program: who you referred, the rewards earned, and, for cash payouts, the payout and tax details Whop collects.
• Email engagement: whether our emails were delivered and opened, and which links were clicked, recorded by our email provider.
• Support emails: anything you send us, and our replies.
• Server logs: our host records standard request data, including IP address, browser type and pages requested, for security and to prevent abuse.

We never receive or store your card number. You enter payment details directly into Whop’s own checkout, and they never reach our systems.

2. Why we use it, and our legal basis

Where the UK or EU GDPR applies, our legal bases are as follows:

• To run your membership: giving you access, billing, support, and the referral rewards you earn. Basis: performance of a contract.
• To email you about The Academy, including when enrollment opens and free lessons. Basis: consent, which you can withdraw at any time by unsubscribing.
• To keep records for accounting and tax. Basis: legal obligation.
• To protect the business and the community: preventing fraud, abuse and unfounded payment disputes, and enforcing the community rules. Basis: our legitimate interests in running a business and keeping members safe.
• To measure our advertising with the Meta Pixel (section 5). Basis: consent where the law requires it, otherwise our legitimate interests.
• To keep the site and mailbox secure. Basis: legitimate interests.

We don’t carry out automated decision-making or profiling that produces legal or similarly significant effects.

3. Who processes it

We keep the list of providers short. Each one gets only what it needs:

• Whop (Whop Inc.): checkout, payments, sales tax and VAT (as merchant of record), your membership account, the course, part of the community, and referral payouts. Whop receives your payment details directly. Because it handles payments in its own right, it acts as an independent controller of that payment data, not only as our processor.
• Discord (Discord Inc.): part of the community, if you choose to join our server. Discord runs its own service under its own privacy policy, and treats your account and messages as its own users’ data.
• MailerLite (UAB “MailerLite”): our email list and the emails we send.
• Meta Platforms: the Meta Pixel, described in section 5.
• Cloudflare, Inc.: website hosting, DNS and network security.
• Zoho Corporation: our [email protected] mailbox, and therefore any emails you send us.

Except where noted above, each acts as our processor under contract and may use your information only to provide its service to us. We may also disclose information where the law requires it, or to establish or defend legal claims.

4. What we never do

We don’t sell, rent or trade your personal information. We don’t share it with data brokers. We don’t share it with anyone other than the providers named above, except where the law compels us.

Under US state privacy laws, including the California Consumer Privacy Act, we don’t sell personal information. We do use the Meta Pixel to measure and improve our ads on Instagram and Facebook, which some of those laws treat as “sharing” for cross-context behavioral advertising. You can opt out by turning on Global Privacy Control in your browser: we honor it automatically, and the Pixel doesn’t load. You can also manage how Meta uses this information in your Facebook or Instagram ad settings.

5. Cookies and tracking

This website sets no analytics cookies of its own. It does use the Meta Pixel, a small piece of code from Meta Platforms. It records that a page was viewed and, if you join the waitlist, that a sign-up happened. Meta may set its own cookies and combine this with information it already holds to show and measure our ads on Instagram and Facebook. We don’t send your email address to Meta. The Pixel doesn’t load if your browser sends Global Privacy Control. There is no other advertising network on these pages.

To learn which of our links bring people here, the site keeps simple daily counts on our own server: how many times each page was viewed and how many waitlist sign-ups there were, grouped by the link or website the visit came from. These counts are anonymous. They store no cookie, no IP address, and nothing that could identify you or tell one visitor from another.

Whop and Discord set the cookies their own services need when you check out, sign in or use the community, and our email provider records delivery and click data as described above. Their own policies cover those.

6. International transfers

We’re based in the United States, and our providers operate internationally. If you’re in the United Kingdom or the European Economic Area, your information will be transferred to and processed in the United States and other countries.

Those transfers are made under the safeguards our providers maintain for that purpose, which include the UK and EU Standard Contractual Clauses and, where applicable, certification under the EU–US and UK–US Data Privacy Framework. Contact us for more information about the safeguards for a particular transfer.

7. How long we keep it

• Email address and preferences: until you unsubscribe or ask us to delete you. After that, we keep only a minimal suppression record so we don’t email you again by mistake.
• Membership, payment, referral and tax records: seven years, as accounting and tax rules require.
• Community posts: until you delete them, or we remove them, or the space is closed. Messages you posted can stay visible after your membership ends unless you delete them first or ask us to.
• Support emails: up to two years, unless they relate to an ongoing matter.
• Server logs: kept by our host on its standard short-term cycle.

8. Your rights

Wherever you live, you can ask us to access, correct or delete your personal information, and you can unsubscribe from our emails at any time using the link in every message, or by emailing us.

If you’re in the UK or EEA, you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time without affecting processing already carried out, and to complain to your national supervisory authority. In the UK, that’s the Information Commissioner’s Office.

If you’re a California resident, you have the right to know what we collect and why, to ask for deletion or correction, to opt out of the sale or sharing of your information (we don’t sell it, and Global Privacy Control turns off the sharing described in section 4), and not to be discriminated against for using those rights.

To use any right, email [email protected]. We’ll respond within 30 days and may need to verify your identity, normally by confirming you control the email address concerned. Two limits, stated plainly: we can’t delete what Whop or Discord hold as their own users’ data, though we’ll point you to how to ask them; and we may keep the minimum transaction records the law requires.

9. Security

This site is served only over HTTPS. It’s a static website with no user accounts, no logins and no customer database of its own, so there are no stored passwords or customer records here to breach. Your membership, payment and community data live with the established providers named in section 3, each with its own security program. Inside the business, access is limited to the owner.

No method of transmission or storage is completely secure, and we can’t guarantee absolute security. If a breach affecting your personal information happens, we’ll notify you and the relevant regulator where the law requires it.

10. Children

The Academy is for adults and isn’t directed to anyone under 18. We don’t knowingly collect personal information from children. If you believe a child has given us information, contact us and we’ll delete it.

11. Changes

If we change this policy, we’ll update the effective date above, and for material changes we’ll email members and subscribers.