HighTicketMania

DRAFT – for lawyer review, not legal advice

Privacy Policy

Effective: [date]. JC Franchise System LLC, [address] ("we"), operates highticketmania.com. Contact: [privacy email]. US only.

What we collect

  • Account and order data: name, email, phone (if given), billing details handled by Stripe, purchase history, access logs.
  • Pitches: the video or audio recording you submit, your name, email and phone, the time of submission and your consent choice.
  • Usage data: pages visited, device and browser data, IP address, referrer and UTM tags, lesson progress.
  • Messages: emails you send us, and our email delivery events (delivered, opened, clicked where tracking is on).

Video pitches

  • Stored privately in Supabase Storage and accessed through short-lived signed links.
  • Reviewed by our team to evaluate seats.
  • Shared with a hiring business only if you gave consent at submission. Without that consent, the pitch is not shared with any third party. Consent is recorded with the pitch. You may withdraw it by emailing [privacy email]; we stop further sharing but cannot recall copies already sent.
  • Retention: [LAWYER/AL: set period, e.g., 12 months from submission, or until you ask us to delete].
  • Do not include anyone else's personal information in your pitch.

How we use data

To deliver the Products, process payments, review pitches, send transactional and marketing emails, measure and improve our ads and site, prevent fraud and comply with law. We do not sell your personal information. [LAWYER: confirm with respect to the Meta pixel and state-law definitions of "sale/sharing".]

Service providers

  • Stripe: payment processing and tax. Subject to Stripe's privacy policy. We do not store full card numbers.
  • Supabase: database, authentication and file storage (hosted in the US).
  • Resend: email delivery.
  • Vercel and Cloudflare: hosting and DNS/security.
  • Bunny Stream: video hosting for course lessons.
  • Meta (Facebook/Instagram): see below. Hiring businesses receive pitches only as described above.

Advertising and tracking: Meta pixel and Conversions API

We use the Meta pixel (in your browser) and the Meta Conversions API (from our server). They send events such as page views, "Lead" (when you submit a pitch), and "Purchase" with identifiers like hashed email, IP address and browser data, to measure and optimize ads. Meta handles this under its own policies. You can control ad settings in your Meta account and block the pixel with browser tools or privacy settings. [LAWYER: cookie banner / consent requirement for US states with privacy laws; opt-out of "sharing" for targeted ads.]

Your choices

  • Unsubscribe from marketing emails with the link in any email. Transactional emails (receipts, login) continue.
  • Request access, correction or deletion of your data: email [privacy email]. We may need to keep records required by law.
  • State privacy rights (for example California): [LAWYER: add state-specific rights, "Do Not Sell or Share" notice, Global Privacy Control handling].

Security and retention

We use access controls and encrypted connections. No method is perfectly secure. We keep order records as required for tax and accounting; other data for as long as needed for the purposes above.

Children

For ages 18 and over. We do not knowingly collect data from children.

Changes

We will post updates with a new date.

Lawyer questions: state privacy law applicability (thresholds); whether the Meta pixel/CAPI is a "sale/share" requiring an opt-out link; biometric concerns (voice/face in pitches, e.g., IL BIPA, TX CUBI, WA) and whether a written biometric consent/retention schedule is needed; retention period for pitches; disclosure to hiring businesses (role: controller vs processor); CAN-SPAM wording.