The Lab by ESSENTFLOW logo THE LAB™ by ESSENTFLOW™
Log in Join The Lab

ESSENTFLOW™

Privacy Policy

Last Updated: 08/11/2026

1. Introduction

This Privacy Policy describes how [ESSENTFLOW™, a future Pennsylvania LLC] ("Company," "we," "us") collects, uses, stores, and protects your personal information.

By accessing or using ESSENTFLOW™ websites, services, products, or materials, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

Personal Identifiers

  • Name
  • Email address
  • Billing information (processed by Stripe; see Section 6)

Account & Access Information

  • Purchase and access history
  • Membership/subscription status
  • Communication records

Usage Information

  • Interactions with emails
  • Access to ESSENTFLOW™ materials, courses, and membership content

We do not knowingly collect sensitive personal data unless voluntarily provided.

3. How Information Is Collected

Information is collected when you:

  • Make a purchase or join a membership subscription (The Lab or ESSENTFLOW™ Magazine)
  • Subscribe to email communications
  • Communicate with us directly
  • Interact with ESSENTFLOW™ content on third-party platforms (e.g., Substack, Skool, Instagram, Threads, Pinterest, podcast platforms)

4. How We Use Your Information

We use collected information to:

  • Deliver ESSENTFLOW™ products, courses, and membership services
  • Communicate onboarding, updates, and support
  • Process payments
  • Enforce legal agreements and policies
  • Maintain business records and compliance

5. Infrastructure & Hosting

ESSENTFLOW™ services are built on a self-managed application stack (Python/Django, PostgreSQL, Docker, Caddy). Your data is stored on secure, self-managed server infrastructure hosted via a third-party data center provider (Hetzner).

We are responsible for configuring and maintaining the security of this infrastructure. Hetzner provides the underlying physical data center and network; it does not have access to decrypted application data beyond what is inherent to hosting the server.

6. Payments

All financial transactions are handled securely through Stripe, a PCI-compliant third-party payment processor. Our server never views, processes, or stores raw credit card data. Stripe's use of your information is governed by Stripe's own privacy policy.

7. Third-Party Services

We may share limited personal information with trusted third-party platforms solely to operate our business, including but not limited to:

  • Stripe (payment processing)
  • Hetzner (data center / server hosting)
  • Email service providers (communications)
  • Course and community hosting platforms, where used
  • Content and publishing platforms (e.g., Substack, Medium)
  • Social platforms (e.g., Instagram, Threads, Pinterest, LinkedIn)
  • Podcast hosting and distribution platforms

These third parties operate under their own privacy policies. We do not sell or rent personal information.

8. Data Storage & Security

We take reasonable measures to protect your personal information from unauthorized access, misuse, or disclosure, including server-level access controls and encrypted connections.

No method of electronic storage or transmission is 100% secure; however, we implement safeguards appropriate to the nature of the data.

We may retain records related to purchases, enforcement, or disputes for legal and operational purposes.

9. Cookies & Tracking

We may use basic tracking technologies (such as cookies or pixels) to:

  • Improve user experience
  • Monitor website performance
  • Analyze general usage patterns

You may adjust your browser settings to disable cookies where applicable.

10. Communications

By providing your email address, you consent to receive:

  • Transactional communications
  • Access-related notices
  • Product or service updates

You may unsubscribe from non-essential communications at any time.

11. Your Rights, Including the Right to Deletion

Depending on your location, you may have the right to:

  • Request access to your personal data
  • Request correction or deletion of data
  • Withdraw consent for communications

Data Deletion Guarantee: Upon your request, or upon deletion of your account, all associated user data and server-side media files will be permanently purged from our active databases and disks within 30 days. Encrypted backup copies, if maintained, are rotated on a standard backup cycle and are automatically overwritten no later than 180 days after deletion.

Requests may be submitted by contacting us directly.

12. Data Retention

We retain personal information only as long as necessary to:

  • Fulfill services
  • Maintain legal and business records
  • Resolve disputes
  • Enforce agreements

13. Children's Privacy

ESSENTFLOW™ services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

14. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, without regard to conflict-of-law principles.

15. Updates to This Policy

We may update this Privacy Policy at any time. Changes will be reflected by updating the "Last Updated" date. Continued use of ESSENTFLOW™ constitutes acceptance of the updated policy.

16. Contact Information

If you have questions about this Privacy Policy or your personal data, please contact:

[ESSENTFLOW™, a future Pennsylvania LLC] Email: support@essentflowbyshae.com

← Back to The Lab