Privacy Policy
Last Updated: January 3, 2025
Summary: We collect minimal information (name, email, goals) to provide our service. We don't sell your data. We use secure payment processing through Stripe. You have rights to access and delete your data.
This Privacy Policy describes how Seismic Mind Shifts, LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website and custom subliminal audio generation service (the "Service").
1. Information We Collect
1.1 Information You Provide Directly
When you use our Service, you provide the following information:
- Name: Your first name or preferred name for embedding in subliminal audio affirmations
- Email Address: For order confirmation and delivery of audio files
- Goals and Affirmation Content: The personal goals and intentions you submit for affirmation generation
- Payment Information: Processed securely by Stripe (we do not store full credit card details on our servers)
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information:
- Usage Data: Pages visited, time spent, browser type, device type, operating system
- IP Address: For security, fraud prevention, and geographic analytics
- Cookies and Similar Technologies: Small data files stored on your device (see Section 6)
1.3 Information from Third Parties
We receive limited information from:
- Stripe: Payment confirmation and transaction details
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Service Delivery
- Generate custom subliminal audio files with your name and goals
- Process payments and send order confirmations
- Deliver audio files via email
- Provide customer support and technical assistance
2.2 Service Improvement
- Analyze usage patterns to improve the Service
- Test and develop new features
- Monitor service performance and fix technical issues
2.3 Legal and Security
- Detect, prevent, and respond to fraud or security issues
- Comply with legal obligations and enforce our Terms of Service
- Protect the rights, property, and safety of our users and the public
2.4 Marketing Communications (Opt-In Only)
- Send occasional product updates or promotions (only if you opt in)
- You can unsubscribe at any time via the link in emails
3. How We Share Your Information
We do not sell your personal information.
3.1 Service Providers
We share information with trusted third-party service providers who assist in operating our Service:
- Stripe: Payment processing (subject to Stripe's Privacy Policy)
- Email Delivery Services: For sending order confirmations and download links
- Cloud Hosting Providers: For secure data storage and service infrastructure
These providers are contractually obligated to protect your data and use it only for specified purposes.
3.2 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal processes (subpoenas, court orders)
- Requests from law enforcement or government authorities
- Protection against fraud, security threats, or illegal activity
3.3 Business Transfers
If Seismic Mind Shifts, LLC is acquired, merged, or undergoes a business transfer, your information may be transferred to the acquiring entity. You will be notified of any such change.
4. Data Retention
4.1 Retention Period
We retain your personal information for as long as necessary to:
- Provide the Service and fulfill delivery obligations
- Comply with legal and accounting requirements (typically 7 years for transaction records)
- Resolve disputes and enforce our Terms of Service
4.2 Deletion Requests
You may request deletion of your personal information (see Section 8: Your Privacy Rights). Note that we may retain certain information as required by law or for legitimate business purposes.
5. Data Security
5.1 Security Measures
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Secure Payment Processing: Payment information is processed by Stripe (PCI DSS Level 1 certified)
- Access Controls: Limited employee access to personal data on a need-to-know basis
- Regular Security Audits: Ongoing monitoring and testing of our systems
5.2 No Absolute Security
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Cookies and Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files stored on your device that help us improve your experience and analyze website usage.
6.2 Types of Cookies We Use
- Essential Cookies: Required for the Service to function (e.g., payment processing)
- Analytics Cookies: Help us understand how users interact with our website
- Preference Cookies: Remember your settings and preferences
6.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of the Service.
7. Third-Party Links
Our website may contain links to third-party websites or services (e.g., social media). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.
8. Your Privacy Rights
Depending on your location, you may have the following rights:
8.1 General Rights
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Objection: Object to certain processing activities
- Data Portability: Receive your data in a structured, machine-readable format
8.2 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information (with certain exceptions)
- Right to opt out of the sale of personal information (Note: We do not sell personal information)
- Right to non-discrimination for exercising your rights
8.3 European Residents (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access, rectification, erasure, and restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
8.4 Exercising Your Rights
To exercise any of these rights, contact us at: privacy@seismicmindshifts.com
We will respond to your request within 30 days (or as required by applicable law).
9. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own (including the United States). These countries may have different data protection laws. We take steps to ensure your information receives adequate protection regardless of where it is processed.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification (for significant changes)
- Displaying a prominent notice on our website
Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Seismic Mind Shifts, LLC
Email: privacy@seismicmindshifts.com
Support: support@seismicmindshifts.com
Website: https://seismicmindshifts.com
13. Data Processing Legal Basis (GDPR)
For EEA residents, we process your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill our contract with you (providing the Service)
- Consent: You have given explicit consent for specific processing activities (e.g., marketing emails)
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement)
- Legal Obligation: Processing is required to comply with applicable laws
By using our Service, you acknowledge that you have read and understood this Privacy Policy.