Privacy Policy

The Aligned Biz Co, LLC ("Company," "we," "us," or "our") operates SkillPath at myskillpath.app (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. By accessing or using SkillPath, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use immediately.

1. Information We Collect

1.1 Information You Provide Directly

• Account registration details: name, email address, and password.
• Profile information you enter into the Platform, including business ideas, skills assessments, and evaluation responses.
• Communications you send to us, including support requests and beta feedback submissions.
• For Pro BYOK subscribers: your OpenAI API key, which is encrypted at rest using AES-256 encryption and never stored in plaintext.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction patterns.
• Device and browser information: IP address, browser type, operating system, and referring URLs.
• Cookies and similar tracking technologies (see Section 5).

1.3 Payment Information

All payment transactions are processed by Stripe, Inc. We do not collect, store, or have access to your full credit card number, CVV, or other sensitive payment details. Stripe's privacy policy governs the handling of your payment data.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and deliver the services you have requested.
• Process payments and manage subscription billing through Stripe.
• Generate AI-powered business idea suggestions, evaluations, and market analyses based on your inputs.
• Send transactional emails, including account confirmations, password resets, and subscription notifications.
• Send marketing and promotional communications, where you have opted in or where permitted by applicable law. You may opt out at any time.
• Improve, personalize, and develop the Platform and our services.
• Monitor usage patterns to detect abuse, fraud, and security threats.
• Comply with legal obligations and enforce our Terms of Use.

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of third parties:

• Stripe, Inc. — for payment processing and subscription management.
• OpenAI, LLC — your inputs are transmitted to OpenAI's API to generate AI outputs. OpenAI's data usage policies apply to data processed through their API.
• GoHighLevel — for CRM and customer relationship management. We share your name, email address, and account tier status.
• Analytics providers — we currently use platform-level analytics and plan to add Facebook Pixel and Google Analytics. These services may collect usage data subject to their own privacy policies.
• Legal and regulatory authorities — when required by law, court order, or to protect our legal rights.

4. Data Retention

We retain your account data and content for as long as your account is active. If you cancel a paid subscription, your account is deactivated and your data is preserved in our systems indefinitely unless you request deletion. If you request deletion of your account, we will remove your personal information within 30 days, subject to any legal retention obligations. Aggregated, anonymized data may be retained indefinitely for analytical purposes.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Session cookies — to maintain your authenticated session. These are essential for the Platform to function and cannot be disabled.
• Analytics cookies — to understand how users interact with the Platform. We plan to implement Google Analytics and Facebook Pixel, which may set their own cookies subject to their respective privacy policies.

You may control cookie settings through your browser. Disabling essential cookies will prevent you from logging in.

6. Data Security

We implement industry-standard security measures, including AES-256 encryption for sensitive stored data, bcrypt password hashing, HTTPS enforcement, HTTP security headers, and rate limiting on authentication endpoints. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.
• Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at [email protected].

8. Children's Privacy

SkillPath is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has provided us with personal information, we will delete it promptly. If you believe a minor has submitted information to us, please contact us at [email protected].

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. If changes are material, we will notify you by email or by a prominent notice on the Platform. Your continued use of SkillPath after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: