Privacy policy

Next Pillar Capital LLC, a Delaware limited liability company, runs Next Pillar Academy at nextpillaracademy.com. This page explains what personal information we collect from members and visitors, why, who else handles it, and the choices you have. The Terms of service cover the rest.

• Account: your email address, your name, and how you sign in (an emailed link, or Google when it is turned on).
• Billing records: your plan, status, renewal dates, the wording you agreed to at checkout and when, and your Stripe customer reference. We also keep your payment history (charges, failed payments, refunds, plan changes) and, if you cancel, the reason and any comment you give. Your card number never reaches us: Stripe collects and holds it.
• Team seats (only if you are on a team or buy seats for one): the person who buys seats gives us the email address of each person they invite. We keep an invited address only to send that invitation and to give the person access through the team, we show it only to the person who bought the seats (and to staff who run the Academy), and we never put it in our usage records. If you buy seats we also keep the list of seats, who holds each, and the one subscription they share, and we use your seat holders’ email addresses for nothing else. Removing a seat ends that person’s access through the team and erases the email address we kept for the seat (the same happens when the team ends or a member’s account is deleted); their own account stays unless they ask us to delete it.
• Workshop account (only if you make one at an event): the name, email, company and city you give on the sign-up page, that you signed up at that event, and when. If you use the Workshop we also keep the answers you give the AI policy builder, the policy it drafts (and your edits), the business details you give for the starter prompts, and a log of when a draft was made (not its content). Only you can open them. The answers go to Anthropic to draft the policy (see “Who else handles your information”). Your workshop account works until Sunday, October 18, 2026, and we keep your saved answers and policy after that so they open again if you join. If you join, the same billing records as any member are kept, and we note that you came from the event.
• Profile: your photo, role, company (you can hide it), industry, the city you type, a short bio, a LinkedIn link, and “can help with” and “looking for” tags. The city is a text you type; the Academy never reads your device’s location.
• Private business details (optional): business name, website, company size band and revenue band. See “Who can see what” below.
• What you do here: your posts, comments and reactions; lesson progress; your module quizzes, Test out attempts, placement test and certificate exams (which questions were drawn, your answers, your score, how long each took, and whether you left the screen (in the iPhone app also whether you took a screenshot or your screen was being recorded or mirrored; we never store the screenshot or the recording), so a pass can be checked for fairness; a host may review an attempt that looks unusual); calls you RSVP to and “Join live” clicks; the lessons and transcripts you open (these views are logged and rate-limited to protect the content); notifications and email preferences; and when you were last here.
• Certificates: when you finish a course path and pass its exam we issue a Certificate in that subject and keep a record of it: the credential number, the date, the modules you completed (and which of them you tested out of), the exam date, and any proof of work you send (a link, a note and files, which only you and staff can open). If you remove your account, your certificates and proof are deleted with it. A certificate has a public page only if you switch it on; it then shows your name as first name and last initial, the certificate title, the dates, the module list and the credential number, and nothing else (no email, company or scores). Anyone with the link can open it; search engines are asked not to index it. You can switch it off at any time. If a certificate is revoked, the page says so.
• How you use the Academy (our own usage records): the pages you open and how you got to them (for example a link or a campaign), what you click, which course-map modules you open, what you type into a search box, how long you are active, how far you watch a lesson video, the forms you start and finish, the certificates you earn, the proof you submit and when a certificate page is opened (by a code that identifies the credential, never the person), and errors you run into. The activity we record on the Academy is linked to your account. We also note basic technical details: device type, browser, operating system, language, screen size and the country, region and city your connection appears to come from. When you are signed in, these records are tied to your account; before that they are tied only to a random code in your browser. We do not store your IP address. This record is kept in our own database, not by an analytics company.
• Ratings and feedback: the ratings and comments you give us about the Academy, a lesson, a call or a feature.
• iPhone notifications (only if you turn them on in the app): a device token that Apple gives the app so we can send you a notification, and your choices for which notifications to receive. Notifications carry short, general text; they never include another member’s name or what a member wrote. You can turn them off in the app at any time, and the token is deleted when you do.
• Messages to support: what you send through the contact form or by email.
• On the call: live calls are recorded, and the recording and its transcript include what you say and show. See “Live calls”.

• Other members see your name as first name and last initial (for example “Ryan H.”), your photo, and the profile details you have chosen to show. The directory never shows email addresses, phone numbers or company contact details.
• Company and city are shown unless you hide them in your profile. The map places a pin from the city you typed, and only if you leave that on.
• Business name, website and company size are seen only by you and Academy admins.
• Revenue band is shown to no one unless you switch on sharing. If you do, it is shown only to members in a different industry from yours, never to members in your industry, and never while your industry is not set.
• Staff (founders, admins and moderators) can see account and billing status, and can see content that has been reported, in order to run and protect the Academy.

The directory is rate-limited so that the member list cannot be copied out in bulk.

• To run your membership: sign you in, take payment, give you access, and send receipts and billing notices.
• To run the community: show your posts, comments and profile to other members, send notifications, event reminders and the weekly digest (you can turn the digest off), and keep the room safe through reports and moderation.
• To answer you when you contact support or make a data request.
• To protect the Academy: rate limits, the video watermark, and logs that help us trace leaks or abuse.
• To improve the Academy: we study how members use it (what gets used, where people get stuck, why members stay or leave, which lessons help) to fix and improve the courses, the product, our pricing and how we reach new members. This is part of your membership terms (next section).

We do not sell member information, and we do not use it to show you ads.

By accepting the Terms when you join, you let Next Pillar use your activity on the site, de-identified, to improve courses. “Activity” means what you post and comment, what you read and watch, and how you use the Academy. “De-identified” here means the analysis works from an internal member code rather than your name or email address, and obvious identifiers are removed from the text it reads. It does not mean that something you wrote could never be traced back to you. We use it for course improvement and for analytics about how the Academy is used. [Counsel to confirm whether private messages are in scope.]

• Names and email addresses are not part of the analysis. The records an analysis reads use an internal member code, not your name or email address. In the comments (feedback and the reason you give when you cancel) and search words that it does read, emails, web links, long numbers and anything that looks like a secret key are removed. That is not a guarantee: a comment can still say who wrote it, which is why those comments and search words are read only for members who agreed to the analysis.
• Your own words stay out if you opt out. If you ask us to stop, or did not agree in the first place, your feedback and cancellation comments, the words you type into search, your profile text and what you post or comment are left out of any AI analysis. Counts such as how often you visited remain part of our usage statistics.
• No training on your data. The AI provider we use must not train its models on member data. [Provider name and the contract terms that guarantee this: counsel to verify.]
• Not for ads, sale or moderation. It is not used for advertising, it is not sold, and it is not used to decide whether to remove content or members: people make those decisions.
• Ask us to stop. Contact support and we will turn it off for your account. Turning it off stops future use; it does not undo analysis already done.

We use these services to run the Academy. They handle information only to provide their service to us.

• Stripe: payments, receipts, invoices and the billing portal. Your card details go straight to Stripe.
• Supabase: our database and sign-in. Our own usage records (above) are kept there; no separate analytics service receives them.
• Cloudflare: hosting, file storage and lesson video (Cloudflare Stream).
• Apple: if you turn on iPhone notifications, Apple’s push service delivers them. It receives the device token and the short notification text.
• Resend: the email we send you (sign-in links, event reminders, the weekly digest and other notices).
• GoHighLevel: our customer-relationship tool. We send it events about your membership (for example that you joined or cancelled) with your member reference, email address, first name and plan interval. If you make a workshop account or join from one, we also add you as a contact with your name, email, company and city and a tag for the event, and we email the founders the same details. We do not send it your posts, messages or profile content.
• Anthropic (Claude): only if you use the Workshop’s AI policy builder. The answers you give it (your company’s name, the name and role of your AI lead, and your choices) are sent to Anthropic’s Claude to draft the wording of your policy. Do not enter client names or confidential details. We do not send Anthropic your email address or anything else from your account. [Counsel to confirm Anthropic’s data terms and our notice.]
• The video-call service for live calls: [Google Meet or Zoom: confirm]. It records and transcribes the weekly call.
• OpenFreeMap: your browser loads map tiles from it when you open the member map. It sees your browser’s request, not your profile.
• Google: only if you choose to sign in with Google.

We may also disclose information when the law requires it, or to protect the Academy and its members, or in a sale of the business. [Counsel to confirm.]

We use what the Academy needs to work, and two cookies for our own usage records:

• a sign-in cookie that keeps you logged in;
• two first-party analytics cookies: one recognizes your browser (kept up to 400 days) and one marks a single visit (it ends after 30 minutes without activity). Each holds a random code, not your name or email. We link the code to your account when you sign in, so we can see how you use the Academy over time;
• your light, dark or system theme choice, and a small note that you have dismissed the “Add to home screen” reminder, both kept in your browser’s own storage;
• if you install the app, a service worker that saves only the offline page and static files such as icons and scripts. It never saves your pages, posts or other member data.

The two analytics cookies are our own and are not shared with anyone. They are named “npc_vid” (a random code that lets us recognize the same browser) and “npc_sid” (a random code that groups what you do into one visit; your browser removes it when it is closed). We set them on every visit, including to the public pages and before you sign in. We do not use advertising cookies, and we do not use third-party analytics or trackers on the Academy. Stripe sets its own cookies on its payment pages, under its own policy. [Counsel to confirm whether a cookie notice or an opt-out is needed for the analytics cookies.]

The weekly call is recorded and posted as a replay with a transcript. Replays and transcripts are shared with members. We tell you about this when you join and again out loud at the start of each recorded call. If you want a segment about you or your business cut, ask us and we will cut it.

We keep your information while you are a member and for as long as needed afterward for billing and legal records and to settle disputes. Usage records (the pages, clicks, searches and similar described above) are kept for [Will and counsel to set the period]. When you ask us to delete your account, a founder deletes your account, what you posted, and the usage records, payment history and feedback tied to it within 30 days. [Retention periods by type of data, and what we keep where the law requires: counsel.]

• Profile and privacy: edit your profile any time, and hide your company or city.
• Email: turn the weekly digest and other notifications on or off in Settings → Notifications.
• iPhone notifications: in the app, choose which ones you get in Settings → Notifications, or turn them off in iOS Settings.
• Access and deletion: in Settings, under “Your data”, ask for a copy of what we hold about you or ask us to delete your account. A founder handles each request by hand and replies within 30 days. If you cannot sign in, contact support.
• Cancel: you can cancel any time in Settings → Billing. Cancelling does not delete your information by itself; ask for deletion if you want that.

[State and other privacy-law rights (for example California) and how to exercise them: counsel.]

The Academy is for adults who run or work in a business. It is not meant for anyone under [minimum age: counsel], and we do not knowingly collect information from them.

If we change this page in a way that matters, we will tell members in the Academy or by email, and the date at the top will change.

Questions or requests: contact support or write to [support email]. Next Pillar Capital LLC, [mailing address].