Privacy policy

This page explains what we collect when you use The Ultemir Playbook on cyrusvakil.com, why we collect it, and what you can ask us to do with it. "We" means the seller named above.

What we collect

• Your email. Stripe asks for it at checkout, and you type it when you log in. We use it to create your account, log you in and answer you.
• Your phone number. Stripe asks for it at checkout. We use it to call or text you about your order and your call.
• Your payment. Stripe takes the payment. We never see or store your card number. Stripe tells us the amount, the currency, your email, your phone number and an order number.
• Your answers on the plan page (/start). Your kind of work, where your customers come from, your hardest part and when you want new customers. We save them before checkout, without your email. If you buy, your order carries the plan's ID, so the two are linked. Your browser also sends each answer to Meta for ad measurement (below).
• Details saved with those answers. Your IP address, your browser and device type (the "user agent"), and Meta's browser IDs (the fbp and fbc values) if your browser has them. We use the IP address to limit how many plans one address can start, which stops spam. We use all of them for ad measurement, below.
• Which ad or link brought you. If you came from one of our ads or links, we keep which one (the utm tags in the link, and which of our pages sent you) with your order. We use it to see which ads lead to sales.
• Your account and logins. Your email, when the account was made, when you log in, and what you own, and the IP address and browser of each login (kept by Supabase for security). When you log in, we set a secure cookie that keeps you logged in. If you redeem an access code, we keep the code and your tries.
• Ad measurement (Meta). When the Meta pixel is on, your browser tells Meta which pages you view, how far you read our long pages, when you use the calculator, each answer you tap on the plan page (/start), which option you lean toward on our article, when you start checkout or buy, and when you book your call. Our server also sends Meta your checkout and your purchase (Meta's Conversions API), with the fbp and fbc IDs, your IP address and browser, the order value and the page. With your purchase, it also sends your email and your phone number hashed (scrambled before they leave us). Meta uses this to tell us which ads work. Meta also sets its own cookies.
• Progress saved in your browser. Lessons you marked done, checklist ticks, light or dark mode, text size, whether this browser has the training, and your plan answers for the visit, so coming back from checkout keeps your plan. These stay in your browser. We never receive them. Clearing this site's data deletes them.
• Server logs. Our host keeps standard request logs, like IP address, page and time, for security and fixing errors.

Who processes it for us

• Stripe: payments and receipts.
• Supabase: our database, accounts and logins. Supabase also sends your login emails.
• Vercel: hosts the site and runs its server code.
• Calendly: to book your call; your name and email are filled in for you.
• Meta: the pixel and the Conversions API, for ad measurement.

Each one handles your data under its own privacy policy.

Why we use it

• To sell you the training and give you access.
• To log you in and keep your account safe.
• To answer you when you email us.
• To book your call, and to call or text you about your order and your call.
• To see which ads work, so we spend less showing them to the wrong people.
• To stop spam and abuse.

We don't sell your data. We only email you login codes. Stripe emails your receipt.

How long we keep it

• Your account and purchase: as long as you have access, and longer if tax or accounting rules require it.
• Plan answers: until we delete them or you ask us to.
• The details saved with them (IP address, browser, Meta's browser IDs): cleared automatically 90 days after you made the plan.
• Progress in your browser: until you clear it.
• Stripe and Meta keep their own copies under their own policies.

Your choices

• See, fix or delete your data. Email support@ultemir.com from the email on your account. We'll answer within 30 days. Deleting your account ends your access to the training. If you didn't buy, we can't link your plan answers to you, because we never asked for your email.
• Limit ad tracking. Block third-party cookies or turn on your browser's tracking protection, and use the ad settings in your Meta account.
• Clear your progress. Clear this site's data in your browser.

Security

• The whole site runs over HTTPS.
• There are no passwords. You log in with a one-time code sent to your email.
• The login cookie is secure and can't be read by scripts on the page.
• Card details stay with Stripe.
• Only our server can read the database. Database rules keep each account to its own data.

No system is perfect. If you find a problem, email support@ultemir.com.

Children

The Ultemir Playbook is for adults who run or work in a business. It's not for anyone under 18, and we don't knowingly collect data from anyone under 18. If you think a child gave us data, email us and we'll delete it.

Changes

When this page changes, the date at the top changes too.

Contact

Email support@ultemir.com.