Privacy Policy

The Ecom Atlas is operated by Ecom Iman LLC (the “Company”). The Company is responsible for the personal information described in this Policy.

This Policy covers the website, gated learning library, sign-in, purchases, and support. It does not govern a third party’s own website or service.

For EEA and UK visitors, our lawful basis depends on the purpose:

• Perform our contract: take and verify the purchase, deliver access, sign you in, and provide support.
• Operate and protect the service: maintain sessions, troubleshoot errors, prevent fraud and abuse, and secure the site. We rely on our legitimate interests where applicable.
• Meet legal obligations: keep required tax and transaction records and respond to binding legal requests.
• Perform our contract or pursue legitimate interests: send purchase, activation, sign-in, security, support, and material service notices. Our interests are delivering the service, answering requests, and keeping users informed about material operational or security issues.
• Optional analytics: with your consent, understand product use and lesson feedback so we can improve the service.

We do not send marketing email without your consent. You do not have to provide personal information, but we cannot deliver paid access without a purchase email and the information needed to verify the transaction.

We share only what is needed with providers that operate the service for us:

• Stripe hosts Checkout and processes payment.
• Neon hosts the database and authentication system.
• Resend delivers transactional and sign-in email.
• Vercel hosts and delivers the application from a US region.
• PostHog provides optional product analytics after you consent.

We may also disclose information when required by law, to protect rights or safety, to investigate fraud or abuse, or as part of a merger, financing, reorganization, or sale where the recipient must respect this Policy.

We do not sell personal information. We do not share it for cross-context behavioural advertising.

Neon Auth uses necessary session cookies for sign-in and access. The app also uses local browser storage for progress, plans, feedback, and your analytics choice.

PostHog analytics cookies and browser storage are optional and are not activated before you accept analytics. You can change the choice at any time through Cookie choices in the footer. We do not use advertising or retargeting cookies. See the Cookie Policy.

• Account, purchase, and entitlement records are kept while needed to provide and document access.
• Transaction records may be retained after access ends for tax, accounting, dispute, fraud-prevention, and other legal obligations.
• Support messages and server logs are kept only as long as reasonably needed to resolve the issue, operate securely, and meet legal obligations.
• Session cookies expire or are cleared according to their settings; the cached session_data cookie lasts about five minutes.
• Browser-stored preferences, progress, plans, feedback, and consent remain until you clear them or the app replaces an incompatible stored version.
• Optional analytics records are retained according to our configured PostHog retention settings and deleted or de-identified when no longer reasonably needed for product analysis.

When information is no longer needed, we delete or de-identify it. A deletion request may not remove records we must keep by law or need to establish, exercise, or defend legal claims.

We use reasonable administrative and technical safeguards appropriate to a small online service, including hosted access controls, verified-email sign-in, server-side entitlement checks, and payment processing through Stripe. No internet service is completely secure, so we cannot promise absolute security.

You may ask to access, correct, delete, or export your personal information by emailing hello@theecomatlas.com. Tell us the email used for the account or purchase and the request you want us to handle. We may need to verify your identity before acting.

Depending on where you live and why we use the information, some requests may be limited by law. We will explain if we cannot complete a request. You may use an authorized agent where applicable, but we will require proof of authority and may still verify your identity directly.

Browsers may send a Do Not Track signal, but there is no common standard for responding to it. The site does not currently respond to that signal. Use Cookie choices to control PostHog analytics. PostHog is the only third party that collects site-usage analytics from your browser, and it does so only after consent; we do not permit cross-site advertising tracking.

If the EU GDPR or UK GDPR applies, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and complain to your local supervisory authority. Where we rely on consent, you may withdraw it at any time without affecting earlier processing.

Right to object: you may object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds or need the information for legal claims. We do not use personal information for direct marketing without consent.

You may contact us first at hello@theecomatlas.com. We generally respond within one month, although the law may permit an extension for a complex or numerous request. You also have the right to complain directly to the data protection authority where you live or work, including the UK Information Commissioner if you are in the UK.

We do not use personal information for automated decisions that produce legal or similarly significant effects. The optional plan questionnaire runs in your browser, gives educational recommendations, and does not determine access, price, or legal rights.

If the California Consumer Privacy Act applies to us and your information, California residents may request to know, access, correct, delete, or receive a portable copy of covered personal information, and may not be discriminated against for exercising those rights.

California law also provides rights to opt out of sale or sharing and to limit certain uses of sensitive personal information. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you.

Submit a request to hello@theecomatlas.com. We will verify and respond as required by applicable law.

The Company is in the United States. The app is hosted by Vercel in a US region, and the database and authentication system are hosted by Neon in the United States. Stripe and Resend may also process information in the United States and other places where they operate.

If you are outside the United States, your information will be transferred to the United States, whose privacy laws may differ from those where you live. Where required, providers use recognized safeguards such as the EU-US Data Privacy Framework and its UK Extension, the European Commission’s Standard Contractual Clauses, and the UK transfer addendum, as applicable to that provider and transfer.

You may email hello@theecomatlas.com for information about the safeguard relevant to your information or how to obtain a copy. Provider certifications, contracts, and hosting choices must be reviewed periodically because they can change.

The Ecom Atlas is not intended for anyone under 18, and we do not knowingly collect personal information from children. In all cases, we do not knowingly collect information from anyone under 16. If you believe a child has provided information, contact hello@theecomatlas.com so we can investigate and delete it where required.

We may update this Policy as the service or law changes. We will change the date at the top and post the new version here. For a material change, we will provide a prominent site notice or email notice where appropriate before it takes effect.

Privacy questions and requests may be sent to hello@theecomatlas.com.