Information we collect
Account: your email and sign-in details (email/password or Google sign-in). Purchases: your account, purchase email, product, amount and payment status — Stripe holds the card details. Digital checkout acknowledgment: the purchasing account, product, exact agreement wording, timestamp, policy version and linked checkout session. Student work: answers you save in Academy exercises. Contact form: your name, email and message. Free workbook signup: your first name, email and the page you signed up from.
Please don't put passwords, sensitive personal information or confidential client data into forms or exercises.
How we use it
To run your account, confirm what you've bought, unlock courses and downloads, save your work, send sign-in, password-reset, purchase and download emails, reply to inquiries, and arrange Builder Sessions.
Free-workbook signups are added to Kit with your first name, email, signup page and a lead tag, and receive a short email series about The Blueprint. Verified live Blueprint buyers are tagged in Kit so they stop receiving those sales emails. Test purchases send clearly marked TEST confirmations only to the test buyer and do not add buyers to Kit or trigger live marketing automations. Every marketing email has an unsubscribe link; unsubscribing doesn't affect purchases or account emails.
Service providers
Lovable Cloud (hosting, accounts, database, file storage and transactional email), Stripe (payments and sales-tax calculation), Kit (marketing email), Google (only if you choose Google sign-in), and an AI service that processes exercise answers only when you ask for an AI review. These providers may process data in other countries.
Browser storage & optional analytics
The site stores sign-in information and small download indicators in your browser.
If you choose “Allow” on the analytics notice, an anonymous random visitor ID and the campaign tags in your link (such as utm_source) are recorded with page visits, button clicks, signups, checkout starts and purchases, so the owner can see which channels bring visitors. No name, email or payment details are attached. Choosing “No thanks” stops it. No advertising pixels are used.
Sharing, security & retention
We do not sell personal information. Information is shared only with the providers above, or where the law requires. Student records are restricted to the signed-in student. No system is perfectly secure.
Current storage audit: accounts are held in the account service; saved exercises, purchases, checkout acknowledgments, sample signups, inquiries and optional analytics are held in Lovable Cloud. Marketing contacts are also held in Kit, and payment records in Stripe. Refunds change purchase status rather than deleting purchase history.
Data retention & account deletion
Student coursework: your saved exercises and phase work are kept while your account remains active, so you can return to them at any time. We do not delete coursework from active accounts.
Transaction records: purchase records, checkout acknowledgments and refund records are kept for seven years from the transaction date, to meet tax, accounting and dispute obligations.
Account deletion: signed-in students can permanently delete their account from the student dashboard by typing DELETE to confirm, or by emailing CarissaLee@carissalee.co from their account email. Deletion removes your sign-in, all saved exercises and phase work (Phase 00 through Phase 10), session booking requests, your local email-signup record and your Kit marketing contact. Transaction records described above are retained for the retention period even after account deletion, as the law may require; financial records are never deleted on request.
Marketing contacts: unsubscribing stops marketing emails. Account deletion also removes the Kit marketing contact and local signup record automatically.
Retention periods: contact-form inquiries — 12 months after the inquiry is resolved, then deleted; free-workbook signups — kept while you remain subscribed, deleted on unsubscribe or account-deletion request; optional analytics — anonymous visitor and event records kept 24 months, then deleted or aggregated.
Third-party retention limitations: Stripe retains payment records under its own legal obligations and cannot delete them on our request; Kit may retain unsubscribed-contact records and suppression lists to honor opt-outs; hosting providers may retain backups and logs for limited periods after deletion.
Your choices & requests
To request access, correction, export or deletion of your information, email CarissaLee@carissalee.co from your account email; we may need to verify it's you. Rights and response times depend on where you live.
Purchases and student accounts are for adults aged 18 or older.
Questions about this policy: email CarissaLee@carissalee.co or contact Carissa Lee Academy™ →