Privacy Policy
This is a template and has not been reviewed by a lawyer. It should be reviewed by qualified legal counsel before being relied upon.
1. What we collect
Account details (name, email, password hash), profile information you provide (track, skill level, job/business and growth goals if you fill them in, and an optional public bio/website), task submissions, quiz and diagnostic-quiz answers, peer feedback you give or receive on task submissions, forum and VIP Lounge posts/replies, direct messages you send or receive, mentor application content if you apply to be a mentor, wallet and referral activity, organization/team membership, and — if you enable two-factor authentication — an encrypted authenticator secret and hashed backup codes. If you enable push notifications, we store the browser subscription needed to deliver them. If you use the AI assistant, your messages to it are stored as part of your account. If you connect the IM Life Builder desktop agent, we store a device credential and how much usage you've consumed against your tier's quota — never the files, commands, or conversation content from that agent session.
2. What we don't collect
We never see or store your two-factor authenticator app's raw secret in plaintext, your actual password, your full card number, your cryptocurrency wallet's private keys, or anything from inside an IM Life Builder desktop agent session beyond usage volume.
3. How we use it
To run your membership: assigning and reviewing tasks, recommending a skill level from diagnostic answers, processing payments (including optional saved-card auto-renewal), metering AI assistant and desktop agent usage against your tier's quota, sending transactional emails (deadline reminders, review outcomes, suspension notices, and similar), and — if you opt in — a weekly digest email. We don't sell your personal data.
4. Cookies
We use a single session cookie to keep you signed in, and a short-lived cookie used only once, to let you save two-factor authentication backup codes right after generating them. We don't use any analytics or advertising cookies.
5. Sharing
We share payment details with our payment processors — Stripe for card payments and auto-renewal, Coinremitter for cryptocurrency payments — only as needed to process a transaction. We don't share your task history, quiz results, or forum activity with any member, investor, or third party beyond what you've explicitly made visible (e.g. opting in to the investor-interest list, posting in a community forum, filling in a public profile, or leaving peer feedback on someone's submission).
6. Investor visibility
If you opt in to investor interest, approved investors on the platform can see your track, skill level, current tier, and tasks-passed count.
7. Direct messages
Unlike community forum content, direct messages are not private-unless-reported: every direct message you send or receive is visible to our admin team at all times, for moderation purposes, without requiring a report first. If you apply to be a mentor, your application bio is visible to admins during review, and once approved, your name/track/skill level/tier and bio are shown publicly in the mentor directory to other logged-in members.
8. Account deletion and data retention
Deleting your account (available any time from Account Settings) anonymizes your name, email, and password, disables two-factor authentication, and deletes your profile, backup codes, and connected-device credentials (including any IM Life Builder desktop agent pairing). It does not delete: forum posts/replies you've made (kept, attributed to "Deleted user," so other members' replies in the same thread aren't affected), peer feedback you've given or received, direct messages you've sent or received, your mentor application/listing, your wallet transaction history (kept for referrer-side ledger accuracy), or historical admin audit-log entries referencing your account. You can download a copy of your own account data at any time from Account Settings before deleting.
9. Administrative account access
For legitimate support, moderation, or security purposes, an authorized admin can temporarily view the platform as your account would see it. Every use of this is logged in an internal audit trail, viewable only by other admins.
10. Security
Passwords are hashed, never stored in plaintext. Two-factor authenticator secrets are encrypted at rest. We rate-limit login and signup attempts to slow down brute-force and credential-stuffing attacks.
11. Changes to this policy
We may update this policy from time to time. Continued use of the platform after a change means you accept the updated policy.
12. Contact
Questions about this policy, or requests regarding your personal data, can be sent to support@illuminatimemberships.com.