FunnelGym

Privacy Policy

Last updated:

This policy explains what personal data we process when you use FunnelGym, why we do it and what you can do about it. We have tried to keep it short and honest. We only describe things we actually do.

Who we are

FunnelGym (funnelgym.com) is operated by FunnelGym. FunnelGym is the controller of the personal data described in this policy.

Our postal address will be listed here before paid plans open.

Contact details will be listed here before paid plans open.

What we collect and why

  • Email address. We use it to send your readiness test result, to run your subscription and to send you access links.
  • Readiness test answers and score, the site language you used, and the ad campaign tags (utm_source, utm_campaign, ad angle) that were present when you submitted the test. We use these to show your result and to understand which campaigns bring people to us.
  • Learning progress: the workouts and projects you completed, with scores and timestamps. If you are a subscriber, this is synced to our server so it follows you across devices. If you are not, it stays in your browser.
  • Certificate details: the name you type, the program and the date. These appear on a public verification page. See the section on that page below.
  • Subscription details: your plan, status, renewal date, Stripe customer and subscription ids, and whether a student discount applies. Your card details never reach our servers. Stripe collects and processes them.
  • Standard server and security logs (IP address, user agent). Our hosting provider and Cloudflare keep these briefly to keep the site secure and running.
  • Google Analytics 4 data, but only if you click "Accept" on the cookie banner. If you decline, the site stays fully functional.

What we do not do

We do not sell personal data. We do not build advertising profiles. We do not make automated decisions that have a legal effect on you.

We do keep first-party usage statistics: event type, page path, language and time. These use no cookies, no IP address and no identifier, so they are not personal data.

Legal bases

  • Contract: to provide the subscription you signed up for, including access links, progress sync and certificates.
  • Legitimate interest: to keep the service secure, to keep first-party statistics and to prevent abuse of the student discount.
  • Consent: for analytics cookies. You can withdraw it at any time through the cookie banner or "Cookie settings".
  • Legal obligation: to keep tax and accounting records.

Who processes data for us

We share personal data only with the service providers we need to run FunnelGym:

  • Stripe: payments and the billing portal.
  • Resend: transactional email, such as access links and receipts.
  • Cloudflare: content delivery, DDoS protection and security.
  • Our hosting provider: the application server and database.
  • Google: Analytics, only if you gave consent.

International transfers

Some of these providers are located outside the EEA, the UK, Turkey or Brazil, for example in the United States. Where data is transferred, it relies on the providers' standard contractual clauses or equivalent safeguards.

How long we keep your data

We keep your account data for as long as your account exists.

You can delete your account on the Account page. Your access stops at once and the account is deactivated. Your personal data (progress, test results, certificates, waitlist entries) is permanently erased 30 days later. If you subscribe again with the same email within those 30 days, the account re-opens with its progress.

Payment records are kept for as long as tax and accounting law requires, even after you delete your account.

Server and security logs are kept only briefly.

Your public certificate page

When you earn a certificate, you type the name that should appear on it. The certificate has a public verification page that shows this name, the program and the date. Anyone with the link can see it, and you decide who gets the link.

Your email address is never shown on that page. The page is removed when your account data is erased.

Your rights

To use any of the rights below, email our support address (it will be listed here before paid plans open). You also have the right to complain to the data protection authority in your country.

You can ask us to:

  • give you access to the personal data we hold about you,
  • correct data that is wrong,
  • erase your data,
  • restrict how we use it,
  • give you your data in a portable format,
  • stop processing that is based on legitimate interest, if you object to it,
  • stop processing that is based on consent, by withdrawing that consent.

Regional information

  • EEA and UK: the rights above come from the GDPR and the UK GDPR. You can complain to your local supervisory authority.
  • Turkey: you have the rights listed in Article 11 of the Personal Data Protection Law No. 6698 (KVKK).
  • Brazil: you have the rights given to data subjects by the LGPD.
  • California: we do not sell or share your personal information.

Children

FunnelGym is for people aged 16 and over. We do not knowingly collect data from anyone younger.

Changes to this policy

If we change this policy, we will update the date at the top of this page.

Contact

Questions about privacy? Contact details will be listed here before paid plans open.