Privacy Policy

This policy covers grantinvests.com and the emails I send. It is written to be read, not to be skimmed past, because the honest answer here is short: there is not much to tell.

1. Who this covers

Grant Invests is a personal publishing project operated by an individual as a sole proprietor. For any privacy question, request or complaint, email [email protected], or write to Grant Invests, 2321 Rosecrans Avenue, Suite 5200, El Segundo, CA 90245.

This policy does not cover Instagram, TikTok, any community or course platform I may use, or any other platform where you might find my content, and it does not cover any third-party site I link to. Those collect their own data under their own policies.

2. What I collect

Your email address. Collected when you unlock a free resource, buy a file, or email me directly. Alongside it I store which page you signed up from. If you buy a file, your order email is also added to my email list (see section 7).

Order information. When you buy something, Stripe collects and processes your name, email address, billing address or country, and payment details in order to take the payment. I never see or store your full card number. What I keep is the order email address, the amount, which files you bought, the date, the Stripe reference for the order, and how many times each file has been downloaded.

Technical information. Cloudflare hosts and protects the site and processes standard request data such as your IP address, browser type and request headers in order to serve pages, block abuse and rate limit the signup form. Cloudflare Web Analytics records aggregate page views, referring site, country and device type. It uses no cookies and does not follow you across other sites.

Anything you put in an email. If you write to me, I keep the message so I can answer it.

Stored in your own browser. When you unlock the gated resources, your email is saved in your browser's local storage under the key gi_email so the content stays unlocked on that device. It stays on your device, I cannot read it remotely, and clearing your browsing data removes it.

3. What I do not collect

• No accounts and no passwords. There is nothing to log into.
• No card numbers or bank details. Stripe handles all of that.
• No advertising pixels, no retargeting tags, no cross-site tracking, no data brokers.
• No sensitive categories: no government ID numbers, no health data, no precise location, no biometrics.
• No information from anyone I know to be a child.

4. Why I use it

• To deliver the resource or the files you asked for.
• To fulfill your order, confirm it, and help you if something goes wrong.
• To send educational emails and occasional product news, if you signed up for them or bought something (see section 7).
• To keep the site secure, available and free of abuse and fraud.
• To understand, in aggregate, which pages are useful.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.

I do not use your information to build a profile about you, and I do not make automated decisions about you.

5. Who it is shared with

Only with the service providers that make the site run, and only for the purpose listed:

• Cloudflare: hosting, content delivery, security, the database that stores signup emails, and cookieless analytics.
• Stripe: payment processing for purchases.
• Kit (formerly ConvertKit): storing the email list and sending list emails. Like most email tools, Kit records whether a list email is opened and which of its links are clicked.
• Resend: sending the order confirmation email with your download links.
• Google: email you send to [email protected] is forwarded to a Gmail inbox, where I read and answer it.

This list is updated when I add a service, such as a platform hosting a community or a course. I may also disclose information where I believe in good faith it is legally required, or necessary to investigate fraud or abuse, enforce my Terms, or protect anyone's rights or safety. If the site or business is ever sold or transferred, information may transfer with it, subject to this policy.

I do not sell or rent your personal information, and I do not share it for cross-context behavioral advertising.

6. Cookies and Do Not Track

This site sets no tracking or advertising cookies, which is why you will not see a cookie banner. The only things stored on your device are the local storage entry described in section 2, which keeps gated content unlocked for you, and, while you shop, the names of the files in your cart, kept in session storage and cleared when you finish an order or close the tab.

Stripe's checkout page is hosted on Stripe's own domain and does use cookies, under Stripe's privacy policy.

Do Not Track: browsers can send a "Do Not Track" signal, but there is no common standard for how sites must respond to it, so this site does not respond to those signals. It also does not track you across other websites, so there is nothing for that signal to turn off. No third party collects personally identifiable information about your activity across different websites through this site.

7. Emails and unsubscribing

Joining the list is single opt-in: you give an email address, you get the resource and the emails. Buying a file also adds your order email to the list, which is stated beside the button on the payment page. If you have unsubscribed before, buying does not sign you back up. Every list email includes an unsubscribe link, and unsubscribing takes effect immediately. Order and delivery emails are transactional, so you still receive those for a purchase even if you have unsubscribed from the list.

8. How long I keep it

• Email list: until you unsubscribe or ask me to delete you.
• Order records: as long as tax and accounting rules require, generally up to seven years.
• Analytics: aggregate only, and never tied to you personally.

I may keep information longer where I need it to comply with a legal obligation, resolve a dispute, prevent fraud or abuse, or enforce my agreements, and I may keep anonymous or aggregated data indefinitely.

9. Security

The site is served over HTTPS with a content security policy and other security headers, the signup endpoint is rate limited, API keys and secrets are kept out of the source code, and the Stripe key the site uses is restricted so it cannot issue refunds or move funds out. Access to the email list and order records is limited to me.

No method of transmission or storage is perfectly secure, so while I take security seriously, I cannot guarantee absolute security and you share information with me at your own risk.

10. Your rights and choices

Whoever and wherever you are, you can ask me to:

• Tell you what information I hold about you.
• Correct anything that is wrong.
• Delete your information.
• Send you a copy of it.
• Stop sending you marketing email, or withdraw consent you gave earlier.

Email [email protected] and I will handle it, normally within 30 days. To verify a request I may ask you to send it from the email address in question. Exercising any of these rights costs you nothing and I will not treat you differently for it. Some information may need to be kept where the law requires it.

11. California residents

What I collect, why, and who it goes to are in sections 2, 4 and 5. I do not sell personal information, and I do not share it for cross-context behavioral advertising.

To review, change or delete your information, email me. That is the process California's online privacy law asks me to describe. The Do Not Track statement it requires is in section 6, and the "last updated" date at the top of this page changes whenever this policy does.

12. EU and UK visitors

If you are in the EU or UK, the legal bases I rely on are: your consent for marketing email when you sign up for a free resource, legitimate interests in emailing customers about similar products (you can unsubscribe at any time), performance of a contract to fulfill an order, legitimate interests in keeping the site secure and understanding aggregate usage, and legal obligation for tax and accounting records. You have the rights in section 10, plus the right to object to processing and to complain to your local data protection authority.

Information is stored and processed in the United States by the providers named in section 5. By using the site you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

13. Children

This site is meant for adults and is not directed at children under 13, or under 16 in the EU and UK. I do not knowingly collect their information. If you believe a child gave me an email address, email me and I will delete it.

14. Changes to this policy

I may update this policy at any time. The current version is always on this page, and the "last updated" date at the top shows when it changed. If a change is material I will say so in an email to the list. Continuing to use the site after a change means you accept the updated policy.

15. Contact

Privacy questions, access requests and deletion requests: [email protected].