PRIVACY POLICY
PRIVACY POLICY
Privacy Policy
Effective date: 2025 October
Company: CBM Strategic, LLC
Contact: kathryn@charliebea.com
This Privacy Policy explains how we collect, use, and share personal information for The Approval Flow and related sites, courses, communities, and tools operated by Kathryn Boren.
This policy is general information, not legal advice.
What we collect
Account info: name, email, password or SSO identifier
Profile and business info: brand name, entity details, country, website, TikTok Shop status you choose to share
Application and form responses: Typeform or similar intake answers
Payment info: handled by our payment processor. We receive status only, not full card numbers
Course and community activity: posts, comments, messages, uploads, progress, support requests
AI assistant prompts: questions you ask our custom GPT and the assistant’s outputs
Device and usage data: IP address, browser, device type, pages viewed, referral source, approximate location
Cookies and similar tech: to keep you signed in, remember preferences, and measure performance
Why we use your data
Create and manage your account and access to the course and community
Provide support and answer questions
Process payments and deliver purchases
Improve lessons, templates, and tools
Send service messages and, if you opt in, updates or marketing
Detect abuse, secure our services, and meet legal obligations
Analyze usage to improve performance and content
Legal bases for EU and UK users
Contract: to provide the services you requested
Legitimate interests: to operate and improve our services, prevent fraud, and secure systems
Consent: for optional cookies and marketing
Legal obligation: to keep records required by law
Sharing information
We share data with service providers who help us run the business. Examples:
Payment processing: Stripe or similar
Course and community platform: Skool or similar
Forms and surveys: Typeform or similar
Email and notifications: email service provider, push service
Analytics and error logging: analytics tools, crash reporting
File storage and hosting: cloud infrastructure
These providers process data under our instructions. We do not sell your personal information.
If required by law or to protect rights and safety, we may disclose information to authorities.
If we undergo a merger or acquisition, your data may transfer to the new owner under this policy.
Cookies and tracking
We use essential cookies for login and security, functional cookies for preferences, and analytic cookies to understand usage. You can control cookies in your browser. Some features may not work without them.
Data retention
We keep personal data only as long as needed for the purposes above.
Examples:
Account data: while your account is active
Transaction records: as required by tax and accounting laws
Support messages and community content: while relevant to the service
AI assistant logs: for troubleshooting and quality, then deletion or anonymization on a schedule
You can request deletion of your account data at any time. Some records may be retained where the law requires it.
Your rights
Depending on your location, you may have these rights:
Access your data
Correct inaccurate data
Delete your data
Restrict or object to processing
Data portability
Withdraw consent where processing is based on consent
Lodge a complaint with your local data authority
To exercise rights, contact us at [email]. We will verify your request before acting on it.
CCPA and CPRA (California)
California residents can request to know, delete, and correct personal information, and opt out of sharing for cross-context behavioral advertising. We do not sell personal information. To submit a request, contact [email]. You can designate an authorized agent.
International transfers
We may process data in countries other than your own. Where required, we use safeguards such as Standard Contractual Clauses.
Security
We use administrative, technical, and physical safeguards to protect data. No method is 100 percent secure. If we detect a breach that affects you, we will notify you as required by law.
Children
Our services are for users 18 and older. We do not knowingly collect personal information from children. If you believe a child provided personal data, contact us to remove it.
Community and UGC
Content you post in the community may be visible to other members. Do not share confidential or sensitive information. We may moderate or remove content that violates community rules.
AI assistant
Questions you ask and outputs you receive may be logged to operate and improve the assistant. Do not paste secrets or full credentials. We may restrict or delete prompts that violate our policies.
Marketing choices
You can opt out of marketing emails by using the unsubscribe link in any message or by contacting us. You will still receive transactional messages about your account and purchases.
Changes to this policy
We may update this policy from time to time. We will post the new version with a new effective date. If changes are significant, we will notify you by email or in the product.
Contact
Questions or requests about privacy
Email: kathryn@charliebea.com
Data controller: CBM Strategic, LLC
If you live in the EU or UK and prefer to contact a representative, email us and we will provide details where applicable.
Privacy Policy
Effective date: 2025 October
Company: CBM Strategic, LLC
Contact: kathryn@charliebea.com
This Privacy Policy explains how we collect, use, and share personal information for The Approval Flow and related sites, courses, communities, and tools operated by Kathryn Boren.
This policy is general information, not legal advice.
What we collect
Account info: name, email, password or SSO identifier
Profile and business info: brand name, entity details, country, website, TikTok Shop status you choose to share
Application and form responses: Typeform or similar intake answers
Payment info: handled by our payment processor. We receive status only, not full card numbers
Course and community activity: posts, comments, messages, uploads, progress, support requests
AI assistant prompts: questions you ask our custom GPT and the assistant’s outputs
Device and usage data: IP address, browser, device type, pages viewed, referral source, approximate location
Cookies and similar tech: to keep you signed in, remember preferences, and measure performance
Why we use your data
Create and manage your account and access to the course and community
Provide support and answer questions
Process payments and deliver purchases
Improve lessons, templates, and tools
Send service messages and, if you opt in, updates or marketing
Detect abuse, secure our services, and meet legal obligations
Analyze usage to improve performance and content
Legal bases for EU and UK users
Contract: to provide the services you requested
Legitimate interests: to operate and improve our services, prevent fraud, and secure systems
Consent: for optional cookies and marketing
Legal obligation: to keep records required by law
Sharing information
We share data with service providers who help us run the business. Examples:
Payment processing: Stripe or similar
Course and community platform: Skool or similar
Forms and surveys: Typeform or similar
Email and notifications: email service provider, push service
Analytics and error logging: analytics tools, crash reporting
File storage and hosting: cloud infrastructure
These providers process data under our instructions. We do not sell your personal information.
If required by law or to protect rights and safety, we may disclose information to authorities.
If we undergo a merger or acquisition, your data may transfer to the new owner under this policy.
Cookies and tracking
We use essential cookies for login and security, functional cookies for preferences, and analytic cookies to understand usage. You can control cookies in your browser. Some features may not work without them.
Data retention
We keep personal data only as long as needed for the purposes above.
Examples:
Account data: while your account is active
Transaction records: as required by tax and accounting laws
Support messages and community content: while relevant to the service
AI assistant logs: for troubleshooting and quality, then deletion or anonymization on a schedule
You can request deletion of your account data at any time. Some records may be retained where the law requires it.
Your rights
Depending on your location, you may have these rights:
Access your data
Correct inaccurate data
Delete your data
Restrict or object to processing
Data portability
Withdraw consent where processing is based on consent
Lodge a complaint with your local data authority
To exercise rights, contact us at [email]. We will verify your request before acting on it.
CCPA and CPRA (California)
California residents can request to know, delete, and correct personal information, and opt out of sharing for cross-context behavioral advertising. We do not sell personal information. To submit a request, contact [email]. You can designate an authorized agent.
International transfers
We may process data in countries other than your own. Where required, we use safeguards such as Standard Contractual Clauses.
Security
We use administrative, technical, and physical safeguards to protect data. No method is 100 percent secure. If we detect a breach that affects you, we will notify you as required by law.
Children
Our services are for users 18 and older. We do not knowingly collect personal information from children. If you believe a child provided personal data, contact us to remove it.
Community and UGC
Content you post in the community may be visible to other members. Do not share confidential or sensitive information. We may moderate or remove content that violates community rules.
AI assistant
Questions you ask and outputs you receive may be logged to operate and improve the assistant. Do not paste secrets or full credentials. We may restrict or delete prompts that violate our policies.
Marketing choices
You can opt out of marketing emails by using the unsubscribe link in any message or by contacting us. You will still receive transactional messages about your account and purchases.
Changes to this policy
We may update this policy from time to time. We will post the new version with a new effective date. If changes are significant, we will notify you by email or in the product.
Contact
Questions or requests about privacy
Email: kathryn@charliebea.com
Data controller: CBM Strategic, LLC
If you live in the EU or UK and prefer to contact a representative, email us and we will provide details where applicable.
