This Privacy Policy explains how Kayla Sierra Consulting ("we," "our," or "us") collects, uses, discloses, and protects information when you use Cavor.iq, the marketing site at startlaunchgo.com, and the application at app.startlaunchgo.com (together, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, do not use the Services.
1. Information We Collect
We collect information in three broad categories: information you provide to us, information we collect automatically, and information we receive from third parties.
Information you provide. This includes:
- Account information — your name, email address, and password (stored as a salted hash) when you create an account.
- Profile information — display name, industry chip, business stage, goal, and other optional profile fields you fill in during onboarding.
- Fillable-document content — anything you type into an interactive tool or fillable business document, saved on our servers so you can return to it.
- Purchase information — the modules or bundles you purchase, the amount and currency, and a payment reference from our payment processor. We do not store your full card number.
- Support and marketing correspondence — the content of emails and support messages you send us, and your responses to any surveys or feedback prompts.
- Testimonial submissions — if you submit a testimonial or outcome story, the content of that submission (which we may edit, combine with other founder stories, or fictionalize before publication; see the Disclosures page for how we handle composite stories).
Information we collect automatically. When you use the Services, we automatically collect:
- Log data — your IP address, user-agent string, requested URLs, referring URL, timestamp, and response status.
- Device information — approximate device type, operating system, and browser.
- Usage data — pages viewed, features used, time spent, module and lesson completion state, and interactive-tool inputs (for analytics, tuning, and progress display).
- Cookies and similar technologies — see Section 6 below.
Information from third parties. We may receive information about you from:
- Our payment processor (Stripe) — a payment reference, purchase amount, and status, so we can grant you the correct access.
- Analytics providers (Google Analytics or similar) — aggregated usage data about the marketing site.
- Publicly available sources — if we quote or reference a public statement you have made.
2. How We Use Information
We use the information we collect to:
- provide, operate, secure, and maintain the Services;
- create and manage your account;
- process purchases and grant the correct entitlements;
- save your progress, tool inputs, and fillable-document drafts;
- personalize your experience (for example, recommending the next module);
- respond to your support requests and communicate with you about your account;
- send transactional emails (account, security, purchase receipts);
- send educational and product emails you have opted into, with a one-click unsubscribe;
- analyze usage patterns to improve the Services;
- detect, prevent, and address security incidents, fraud, and abuse;
- comply with legal obligations and enforce our Terms of Use.
We do not sell your personal information, and we do not rent your email address to third parties.
3. Legal Bases for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on one or more of the following legal bases:
- Contract — to provide the Services you have signed up for.
- Legitimate interests — to secure the Services, prevent fraud, improve the product, and communicate with you about your account.
- Consent — for optional communications, non-essential cookies, and any other processing where consent is required.
- Legal obligation — where we must process data to comply with the law.
You may withdraw consent at any time by contacting [email protected].
4. How We Share Information
We share personal information only in the following circumstances:
- Service providers. We share information with vendors that help us operate the Services. Current providers include:
- Cloudflare — hosting, DNS, edge network, security, and D1 database (data stored on Cloudflare infrastructure).
- Stripe — payment processing.
- Google Analytics — anonymized site analytics (marketing site only, subject to your cookie preferences).
- Gmail (Google Workspace) — inbound and outbound business email ([email protected]).
- Genspark — engineering and administrative tooling used to build and maintain the Services.
Each provider is bound by contractual confidentiality and data-protection obligations and processes your data only on our instructions.
- Business transfers. If Kayla Sierra Consulting is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the successor entity subject to this Privacy Policy or an equivalent one.
- Legal requirements. We may disclose information when we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process, or when necessary to protect the rights, property, or safety of Kayla Sierra Consulting, our users, or the public.
- With your consent. We will share personal information with third parties in any other circumstance only with your prior consent.
5. Data Retention
We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, and record-keeping obligations, resolve disputes, and enforce our agreements. Fillable-document content is retained for as long as your account exists so you can return to your work; you may delete individual documents at any time from within the app. Backups and logs are retained for a limited period and are then rotated out or overwritten.
You may request deletion of your account and associated personal information by writing to [email protected] (see Section 8).
6. Cookies and Tracking Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, secure your session, and (on the marketing site) understand aggregate usage.
Categories of cookies we use:
- Strictly necessary — session, authentication, CSRF, and load-balancing cookies. These are required for the Services to function and cannot be turned off.
- Preferences — cookies that remember your language, industry chip, and similar preferences.
- Analytics — Google Analytics or similar, used on the marketing site to understand how visitors use the site in aggregate.
You can control non-essential cookies through your browser settings. Blocking strictly necessary cookies will prevent the Services from working.
We do not use cross-site advertising cookies or share cookie data with third-party advertising networks.
7. Your Choices and Rights
You have the following choices regarding your personal information:
- Access and correction. You may access and correct most of your profile information from within your account. For anything else, contact [email protected].
- Marketing opt-out. Every marketing email contains a one-click unsubscribe. Transactional emails (account, security, purchase receipts) are required for the Services and cannot be turned off while your account is active.
- Deletion. You may request deletion of your account and personal information by writing to [email protected]. We will delete your data within a reasonable time, subject to legal retention requirements.
- Data portability. You may request a copy of your personal data in a portable format.
- Objection or restriction. You may object to, or request restriction of, certain processing.
If you are located in the EEA, UK, or California, you have additional rights under the GDPR and CCPA/CPRA (see Sections 9 and 10).
8. How to Contact Us About Privacy
To exercise any of the rights above, or if you have any question about this Privacy Policy, write to us at [email protected]. Please include enough information for us to identify your account. We will respond within thirty (30) days, or as required by applicable law.
9. Notice to California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following rights:
- Right to know what personal information we collect, use, and disclose about you.
- Right to delete personal information we have collected about you, subject to certain exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.
- Right of non-discrimination. We will not deny you the Services, charge you a different price, or provide a different level of service because you exercised your CCPA rights.
To exercise these rights, contact [email protected]. We may need to verify your identity before processing your request.
10. Notice to EEA/UK Residents (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR/UK GDPR:
- Access to your personal data;
- Rectification of inaccurate personal data;
- Erasure ("right to be forgotten");
- Restriction of processing;
- Data portability;
- Objection to processing based on legitimate interests;
- Withdrawal of consent (where consent is the legal basis);
- The right to lodge a complaint with a supervisory authority in your country.
To exercise these rights, contact [email protected].
We do not have a designated EU/UK representative because our operations do not currently meet the threshold requiring one. If you are unable to reach a resolution with us directly, you may contact your local data protection authority.
International data transfers. Personal data processed through the Services may be stored and processed in the United States and other jurisdictions. When we transfer personal data out of the EEA or UK to a country without an adequacy decision, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
11. Children
The Services are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.
12. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, and disclosure. These include HTTPS encryption in transit, password hashing at rest, restricted-access production databases, audit logging of admin actions, and periodic review of access controls.
No security measure is perfect, and we cannot guarantee absolute security. If we ever learn of a breach that materially affects your personal information, we will notify you and applicable authorities as required by law.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make a material change, we will post the updated policy at startlaunchgo.com/privacy and update the "Last updated" date. Your continued use of the Services after the updated policy takes effect constitutes acceptance of the changes.
14. Contact
Questions about this Privacy Policy: [email protected].
Kayla Sierra Consulting · startlaunchgo.com · app.startlaunchgo.com