This Privacy Policy explains how Stretch With Susie LLC ("we", "us"), a North Carolina limited liability company operating as Stretch With Susie, collects, uses, and shares information when you use our website, on-demand video library, and live classes (the "Service").
What we collect
Information you provide
- Account info — name, email, password (stored hashed)
- Billing info — handled by Stripe; we never see your card number
- Profile preferences — time zone, equipment, weekly goal, notification settings
- Liability waiver acceptance — recorded with timestamp
- Messages you send us at hello@stretchwithsusie.com
Information collected automatically
- Class registrations + video watch progress
- Browser + device info (user agent, IP, screen size)
- Cookies for authentication and basic site functionality (no third-party advertising cookies)
How we use it
- To provide the Service — class registration, video playback, billing
- To send transactional email — receipts, membership and billing updates, class registrations and cancellations
- To send optional emails — new class alerts and class reminders; you can opt out any time from your account preferences
- To improve the Service through aggregated, non-identifying analysis
- To respond to support requests
Who we share with
We share data only with the providers we use to operate the Service:
- Stripe — payment processing. See Stripe's privacy policy.
- Supabase — account database and authentication.
- Cloudflare — video delivery and basic site performance.
- Resend — transactional email delivery.
- Google — live classes via Google Meet, optional Google sign-in.
- Vercel — website hosting.
- Sentry — error tracking. Receives crash reports that may include your user ID and the page you were on so we can fix bugs.
- Upstash — rate-limiting cache. Stores your IP address temporarily to prevent abuse of sensitive endpoints.
- Better Stack (Better Uptime) — external uptime monitoring. Receives no personal information; only checks whether the site responds.
We do not sell or rent your personal information. We do not share data with advertising networks.
Cookies
We use first-party cookies for authentication (so you stay logged in). Stripe sets its own functional cookies during checkout, used solely for fraud prevention and to complete your payment — these are not advertising cookies and we receive no marketing data from them. We do not use any third-party advertising cookies. Disabling cookies will prevent you from logging in.
Your rights
Depending on where you live, you may have the right to:
- Request a copy of the data we have about you
- Request correction or deletion of your data
- Withdraw consent and have your account deleted
- Opt out of optional emails (link in every email footer)
To exercise any of these rights, email hello@stretchwithsusie.com. We'll respond within 30 days.
Children
The Service is intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we'll delete the account and associated data.
California residents
If you live in California, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you specific rights:
- Right to know— request a copy of the personal information we hold about you and how it's used
- Right to delete — request deletion of your data (subject to legal retention requirements like tax records)
- Right to correct — request correction of inaccurate personal information
- Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising; this right is moot in our case
- Right to non-discrimination — exercising your rights will not affect your service or pricing
To exercise any of these rights, email hello@stretchwithsusie.com. We'll verify your identity (typically by confirming your account email) before fulfilling the request, and respond within 45 days.
Data retention
We retain account information while your account is active. After cancellation, we retain billing records for the period required by tax law (typically 7 years), and delete the rest within 90 days unless you've asked us to delete it sooner.
Security
We use industry-standard security practices (TLS in transit, encryption at rest via our hosting providers, bcrypt password hashing). No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy meaningfully, we'll email active members and update the effective date at the top.