Privacy Policy

1.Who we are

Kindloom Labs is an AI education and resources brand operated by Kindloom LLC, a New Jersey limited liability company.

For privacy questions, contact privacy@kindloomlabs.com.

2.Information we collect

Account information you provide directly: email address, name (optional), and authentication credentials (magic-link sign-in tokens or passkey public keys).

Payment and subscription data: payments are processed by Creem (creem.io), our Merchant of Record. We do not collect or store your full credit card, PayPal, Apple Pay, or Google Pay details. Creem shares limited transaction data with us — such as your name, email, billing country, last four card digits (where applicable), and subscription status.

Usage and analytics data: Vercel Web Analytics automatically collects aggregated, cookieless page-view data (page URL, referrer, country, device type, browser). No personally identifiable information is linked to these analytics. Vercel's infrastructure also logs standard request metadata (IP address, User-Agent, timestamps) as part of normal hosting operations.

Advertising and conversion data: if Meta Pixel is enabled for this site, Meta/Facebook may receive page-view and event data, page URLs, browser/device information, and cookie identifiers to measure ad performance, attribute conversions, and support audience features.

Library resource data: when you access a Library resource, our server retrieves the file from Vercel Blob storage and streams it to you. The file access is logged for security and abuse prevention.

Communication data: messages you send through feedback forms, support requests, or email correspondence.

We do not knowingly collect sensitive categories of personal data (health, biometrics, precise geolocation, race, religion, or political views).

3.How we use information

To provide and operate the website, authenticate your account, and deliver digital products and Library access.

To process payments and manage subscriptions through Creem.

To send transactional emails (magic-link sign-in, receipts, account updates, and service notices).

To respond to your inquiries and support requests.

To send optional marketing or resource-update emails where you have consented. You may unsubscribe at any time via the link in each email.

4.Service providers

We use third-party providers to operate the site. Each receives only the data needed for its function:

Creem (creem.io) — Merchant of Record for payment processing, subscription billing, and tax compliance. Creem receives your payment details, billing address, email, and subscription metadata. See creem.io/privacy.

Vercel (vercel.com) — hosting, global CDN, serverless infrastructure, private file storage (Vercel Blob), and web analytics. Vercel processes all HTTP requests to the site, hosts PDF library files, and collects aggregated, cookieless page-view analytics (URL, referrer, country, device type). See vercel.com/legal/privacy-policy.

Meta / Facebook (meta.com) — advertising, conversion measurement, and audience features when Meta Pixel is enabled. Meta may process page-view and event data according to its own terms and privacy policy.

Neon (neon.tech) — managed PostgreSQL database. Stores user accounts, session tokens, subscription records, passkey credentials, and library item metadata. See neon.tech/privacy.

A transactional email provider — sends magic-link sign-in emails, purchase receipts, and account notifications. The provider receives your email address and message content for delivery purposes only.

We do not sell your personal information to any third party.

5.Legal bases for processing (EEA / UK visitors)

Performance of a contract — to deliver products and Library access you purchase.

Consent — for optional marketing emails and, where applicable, non-essential cookies. You may withdraw consent at any time.

Legitimate interests — to operate, secure, and improve the site in ways that do not override your rights and freedoms.

Legal obligation — for example, retaining transaction records for tax and accounting purposes.

6.Data retention

We retain personal information only as long as necessary for the purposes described above: to provide the service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

When information is no longer needed, we delete or anonymise it. Account data is retained while your account is active plus a reasonable period thereafter for legal and operational purposes.

7.Data security

We implement reasonable administrative, technical, and physical security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

8.International data transfers

We are based in the United States. If you access the site from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate.

Where required by applicable law, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

9.Your privacy rights

Depending on your location, you may have the right to: access, correct, or delete your personal information; receive a portable copy; object to or restrict certain processing; and withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@kindloomlabs.com. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.

EEA / UK residents — you have the right to lodge a complaint with your local data protection authority.

California residents — under the CCPA / CPRA, you may request disclosure, deletion, and correction of personal information, and may opt out of any sale or sharing of personal information. We do not sell or share personal information as defined by those laws.

10.Children's privacy

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11.Cookies

We use strictly necessary cookies for authentication and security (set by NextAuth), infrastructure routing (set by Vercel), and checkout session management (set by Creem on their domain). We use Vercel Web Analytics for aggregated, cookieless page-view analytics — it does not set cookies. If Meta Pixel is enabled, Meta/Facebook may set or read advertising cookies for conversion measurement and audience features.

For details, see our Cookie Policy.

12.Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the 'Last updated' date. Material changes may be communicated by email or a notice on the site.