Privacy Policy

Avalon Capital Holdings LLC, a Georgia limited liability company, trading as AI Income Finder and Income Studio, is responsible for the personal information described here. Write to us at hello@aiincomefinder.app or 8735 Dunwoody Place Ste R, Atlanta, GA 30350, United States.

This policy takes effect on 6 October 2026.

• Account information: your first name, email address, and a securely hashed password. We never see your password in readable form.
• Discovery answers: the eight answers you give, and the directions and product packages generated from them.
• Business information: the decisions you record, meaning your buyer, your product, your offer, your prices, your links, your notes and your progress through the steps.
• Money figures you type in yourself: your income goal and any revenue you log. These are self-reported. We have no access to your bank, your store or your payment accounts.
• Files you upload: if you upload your finished product instead of linking to it, we store that file privately.
• Voice recordings: if you speak an answer, the recording is sent to our AI provider to be transcribed. We do not keep the audio; we keep the text it produces, as your answer.
• Purchase information: what you bought, when, the amount, and identifiers from our payment provider or the store you bought through. We do not receive or store your full card number.
• Credit use: how many credits each AI feature used, so your balance is correct and so we can check our own costs.
• Affiliate information, if you take part: your progress toward unlocking the programme and the sales Beacons credits to you. The identity, payout and tax details needed to pay you are collected by Beacons and its payout provider, not by us.
• Technical information: IP address, browser and device information, and server logs, collected automatically when you use the site.

• To run the Service, generate your directions, and keep your work where you left it.
• To take payment and give you access to what you bought.
• To send you transactional email: your results, your account set-up link, your welcome message and billing notices.
• To give you access to the community.
• To answer your support questions.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To understand how the Service is used so we can improve it, and to check the real cost of AI features against what credits cost you.
• To meet our legal and tax obligations.

We do not sell your personal information, and we do not share it with anyone for their own advertising.

Every email the Service sends today is transactional: your results, your account set-up, your welcome, and billing notices. If we start sending marketing email, we will only send it to people who have agreed to receive it, we will record when and how you agreed and the exact wording you were shown, every message will carry our postal address, and every message will have a working unsubscribe link that we honour promptly. Unsubscribing from marketing does not stop transactional email about something you bought.

We use these providers to run the Service. Except where noted for a store you buy from, they may process your information only on our instructions:

• Supabase: database, file storage and sign-in.
• Vercel: hosting of the website and application.
• Stripe: payment processing, when you pay through Stripe. Stripe handles card details directly under its own privacy policy.
• Beacons and Stan Store: if you buy through one of these stores, the store and its payment processor collect your name, email and payment details under their own privacy policies, and tell us who bought. If you take part in the affiliate programme, Beacons and its payout provider (currently PayPal) collect your identity, payout and tax details in the same way.
• OpenAI: the AI features in the app, including generating your directions and packages, checking the videos you upload or link, and transcribing spoken answers.
• ScrapeCreators and Apify: when you paste a link to a public video, the link is sent to them to fetch that video.
• Resend: sending email, and receiving the sale notifications our store sends us, which include a buyer’s name, email address and the product bought.
• Skool: the member community. What you post there is governed by Skool’s own terms and privacy policy.
• Cloudflare: domain name service and email routing.

We may also disclose information if the law requires it, to enforce our Terms, to protect our rights or someone’s safety, or to a buyer or successor if the business is sold or reorganised.

Our providers store and process information in the United States. If you are in Canada, your information will be processed in the United States and may be accessible to United States authorities under their laws.

• Sign-in cookies, set by our authentication provider, so you stay signed in.
• A Discovery cookie (aif_discovery), which lets you return to your results. It lasts 7 days, cannot be read by scripts in your browser, and is signed so it cannot be tampered with.
• A referral cookie, set only if you arrive through an affiliate link, so that the affiliate is credited. It lasts 60 days, and the most recent link takes the credit.

We do not use advertising cookies. To see how quickly pages load, we use Vercel Speed Insights, which measures page speed without cookies and without identifying you. Your browser also keeps a few small settings on your device, such as a dark mode choice or unsent text in a box you were typing in; they stay in your browser and are not sent to us. If we add any other analytics, this section will say so before it goes live.

We keep your account and your work for as long as your account exists, so that returning members find their business where they left it. Purchase and tax records are kept for as long as the law requires, normally seven years. Server logs are kept for a short period for security.

Files you upload are kept until you delete them or ask us to. We do not delete them on a schedule.

Write to hello@aiincomefinder.app and we will help you with any of the following. We will not charge you or treat you differently for asking.

• Ask what personal information we hold about you and get a copy.
• Correct anything that is wrong.
• Ask us to delete your account and your data. Some records, a purchase for example, must be kept to meet tax and legal obligations.
• Withdraw consent to marketing email at any time.
• Ask us to change the email address on your account. We do this by hand rather than in the app, because your email is also your sign-in and your payment identity.

If you are in California, you have rights under the CCPA/CPRA to know, delete, correct and to opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined. If you are in Canada, you have rights under PIPEDA to access and correct your personal information, and you may complain to the Office of the Privacy Commissioner of Canada.

We will verify who you are before acting on a request, and we will answer within the time the law allows, normally 30 days, or 45 days in California where an extension applies.

Information is encrypted in transit. Passwords are hashed, never stored in readable form. Access to member data inside the database is restricted at the row level so one member cannot read another’s, and uploaded files are stored in a private bucket that is not publicly readable. Administrative access is limited and logged. No service can promise perfect security, and we do not.

The Service is for adults. It is not directed to anyone under 18 and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.

If we change this policy, the date at the top changes. If the change is significant, meaning a new provider, a new purpose, or a new category of information, we will tell you by email or in the app.