Privacy Policy

AI BrandFactory Vault (operated by Win Massive Impact Pvt Ltd under the AI Freedom Club brand) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use vault.aibrandfactory.com.

We collect information you provide directly:

• •Account Information: Email address and display name when you opt in or sign in via magic link. We do not store passwords.
• •Purchase Information: Bundle selection and payment details processed securely through Stripe or Razorpay. We do not store card numbers.
• •Usage Data: Playbooks unlocked, pages visited, and interaction patterns.
• •Device Data: IP address, browser type, and country (used for payment gateway routing and fraud prevention).

• •Provide and manage access to your unlocked playbooks
• •Send magic-link sign-in emails and transactional emails (welcome, receipt, pick confirmation)
• •Process payments and manage your purchase history
• •Detect fraud and prevent abuse
• •Send you product and marketing updates (you can opt out at any time)
• •Improve the vault experience through usage analytics
• •Fire server-side Meta Conversions API events for advertising optimisation (hashed email only)

We do not sell your personal information. We share data only as follows:

• •Payment Processors: Stripe (USD) and Razorpay (INR) receive billing details for payment processing.
• •Cloud Storage: AWS S3 stores playbook PDFs; presigned URLs are generated per request.
• •Email Delivery: Resend processes transactional emails on our behalf.
• •Meta: SHA-256 hashed email is sent via Conversions API for ad measurement only.
• •Legal Requirements: When required by law or to protect our rights.

• •All data is encrypted in transit via TLS/SSL
• •Session cookies are httpOnly and signed with a server-side secret
• •Magic links expire after 15 minutes (login page) or 7 days (emails)
• •PDF files are served via time-limited presigned URLs, not public links
• •Regular security monitoring and access controls

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

• •Access: Request a copy of your personal data.
• •Correction: Request correction of inaccurate information.
• •Deletion: Request deletion of your account and associated data.
• •Opt-out: Unsubscribe from marketing emails at any time via the link in any email.

To exercise any of these rights, contact us at [email protected].

We use an essential session cookie (vault_session, 30 days) to keep you signed in, and a Meta Pixel for advertising measurement. See our Cookie Policy for full details.

We retain your data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal information within 30 days, except where required by law.

We may update this policy from time to time. We will notify you of significant changes via email and update the date at the top of this page.

Questions about this policy: [email protected]