Privacy Policy

Effective Date: December 26, 2025

1. Introduction

Welcome to Success Central (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website at successcentral.com (the “Site”) and use our services.

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.

2. Data Controller Information

Success Central is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

• Email: privacy@successcentral.com
• Data Protection Officer: dpo@successcentral.com

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Name, email address, password (encrypted)
• Subscribe to our newsletter: Email address, name, preferences
• Use our financial calculators: Financial data you input (stored locally or in your account if logged in)
• Contact us: Name, email address, message content
• Make a purchase: Billing information, payment details (processed by secure third-party payment processors)

3.2 Information Collected Automatically

When you visit our Site, we automatically collect:

• Device information: IP address, browser type, operating system, device type
• Usage data: Pages visited, time spent on pages, click patterns, referring URL
• Location data: Approximate location based on IP address
• Cookies and similar technologies: Session data, preferences (see Section 6)

3.3 Information from Third Parties

We may receive information from:

• Authentication providers: If you sign in using a third-party service
• Analytics providers: Aggregated usage statistics
• Payment processors: Transaction confirmation (no full payment details)

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: When you subscribe to our newsletter or opt into marketing communications
• Contract: When processing is necessary to fulfill our agreement with you (e.g., account services, purchases)
• Legitimate interests: For analytics, security, and improving our services
• Legal obligation: When required by law (e.g., tax records, legal requests)

5. How We Use Your Information

We use your information for the following purposes:

• Provide services: Operate your account, save your preferences, and deliver content
• Personalization: Customize your experience based on your interests and usage patterns
• Communication: Send newsletters (with your consent), service updates, and respond to inquiries
• Analytics: Understand how users interact with our Site to improve our services
• Security: Detect and prevent fraud, abuse, and security threats
• Legal compliance: Comply with applicable laws and regulations

6. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for the Site to function (authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how visitors use our Site
• Marketing cookies: Used to deliver relevant advertisements (only with consent)

You can manage your cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect Site functionality.

Third-Party Services We Use

• Supabase: Authentication and database services (data stored securely in the cloud)
• hCaptcha: Bot protection (processes IP address and browser data)
• Sentry: Error tracking (collects error logs, no personal data unless included in error context)
• Vercel: Hosting and analytics (collects usage metrics)
• SendGrid: Email delivery (processes email addresses for newsletter delivery)

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: Third parties who help us operate our services (hosting, email, analytics) under strict data processing agreements
• Legal requirements: When required by law, subpoena, or legal process
• Protection of rights: To protect our rights, property, safety, or the rights of others
• Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all service providers
• Encryption of data in transit and at rest

9. Data Retention

We retain your personal data only as long as necessary:

• Account data: Until you delete your account, plus 30 days for backup recovery
• Transaction records: 7 years (legal/tax requirements)
• Analytics data: 26 months (anonymized thereafter)
• Email marketing: Until you unsubscribe
• Support communications: 3 years after resolution

10. Your Rights

10.1 Rights Under GDPR (EU/EEA Residents)

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint: File a complaint with your local data protection authority

10.2 Rights Under CCPA (California Residents)

• Right to know: Request disclosure of personal information collected, used, and shared
• Right to delete: Request deletion of your personal information
• Right to opt-out: Opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination: We will not discriminate against you for exercising your rights

10.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@successcentral.com or use the data request form in your account settings. We will respond to your request within 30 days (GDPR) or 45 days (CCPA).

11. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Secure authentication with hashed passwords
• Regular security audits and vulnerability assessments
• Access controls and employee training
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our Site is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@successcentral.com. We will delete such information promptly.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new “Last Updated” date
• Sending an email notification (for registered users)
• Displaying a prominent notice on our Site

We encourage you to review this policy periodically. Your continued use of the Site after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

This privacy policy was last updated on December 26, 2025.