Privacy Policy

This Privacy Policy explains how Learn Domains ("we", "us") collects, uses, shares, and protects information when you use learn.domains and app.learn.domains (the "Service"). We collect only what we need to run the Service and improve your results.

Depending on how you use the Service, we collect the following categories of data:

• Account data: your name, email, organization, and authentication identifiers managed through our auth provider.
• Billing data: subscription status, plan, and payment metadata. Card details are handled by Stripe; we do not store full card numbers.
• Website data: the domains you connect and configuration you provide about them.
• Analytics data: usage of the Service and, where you connect them, traffic and engagement metrics from your properties.
• Learn Domains Signal data: when you install our Signal snippet on your website, we collect pageviews, referrers, UTM parameters, basic device type, engagement events (scroll depth, engaged time), custom goals you define, and revenue events you send from your site. Custom goals and revenue events are controlled by you through JavaScript calls on your site. Revenue sent through Signal is client-reported and is not verified against Stripe unless you connect Stripe separately. Do not send sensitive personal information, payment card data, health data, or passwords through Signal events. Signal uses first-party session and visitor identifiers in the browser storage of your site visitors. It does not use invasive fingerprinting and does not collect sensitive personal data by default.
• Live Asset Radar data: when you install our optional Radar snippet on a website you operate, we receive pageview and heartbeat events to show live visitor presence in your Command Center. Each website receives a unique site ID. Radar does not set cookies or use localStorage or sessionStorage on your site. We store page paths (with common sensitive query parameters stripped), page titles, referrers, UTM tags, coarse device category, and approximate country derived from request metadata at ingestion. When edge headers provide them, we also store rounded approximate coordinates (~11 km precision) for globe visualization. We do not collect form values, session replay, heatmaps, or wallet or email content through Radar. Raw Radar events are retained for about seven days; live presence rows expire automatically.
• Google Search Console data: clicks, impressions, CTR, average position, and related query/page data (read-only) for properties you authorize.
• Google Analytics (GA4) data: sessions, users, pageviews, engagement, and source data (read-only) for properties you authorize.
• Stripe revenue data: revenue, MRR, active subscriptions, and transaction metadata where you connect a Stripe account.
• Knowledge base content: documents, notes, and brand context you upload or provide.
• AI prompts and outputs: the inputs you submit to AI features and the outputs generated for your account.
• Support messages: information you send us via the contact form, email, or chatbot.
• Affiliate and referral data: referral links, clicks, signups, conversions, and payout details for program participants.
• Cookies and device data: a first-party visitor identifier, and standard log/device information.

We use the information we collect to:

• Provide, operate, secure, and improve the Service and its intelligence and recommendations.
• Process payments, manage subscriptions and credits, and prevent abuse and fraud.
• Generate AI analysis, briefs, and content drafts you request.
• Communicate with you about your account, support requests, and important Service changes.
• Measure conversion, activation, and retention to improve the product.
• Operate the affiliate and referral programs, including attribution and payouts.

We do not sell your personal information.

When you connect Google Search Console or Google Analytics, we request read-only access and use that data solely to provide and improve user-facing features of the Service for you. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, and we do not transfer it to third parties except as necessary to provide the Service, comply with law, or as part of a merger or acquisition. You can disconnect Google integrations at any time, which revokes our access going forward.

AI features send relevant inputs (which may include your prompts, website data, and knowledge base content) to certified inference providers to generate outputs. We log token usage and estimated cost to manage performance and margins. We work to limit what is shared to what is needed for the requested output.

We rely on trusted service providers to operate the Service. These processors access data only as needed to perform services for us. The current list, with each provider's purpose and category, is published on our Subprocessors page at /subprocessors.

Core processors include payment processing, identity and authentication, managed database hosting, application hosting, rate limiting, email delivery, certified AI inference providers, and Google (read-only Search Console and Analytics APIs you connect). Optional analytics providers load only when configured.

For how we process customer data as a processor, see our Data Processing Agreement at /dpa.

We use first-party cookies for visitor identification, referral attribution, and deterministic experiments, plus essential cookies for authentication. Optional analytics (GTM, GA4, DataFast) load only when configured. We do not embed third-party advertising trackers. Full details are in our Cookie Policy at /cookie-policy.

Asset Yield connects growth orders you complete in Learn Domains to Signal events, goals, revenue events, and integration corroboration to estimate which actions created measurable value. Asset Yield Score is an internal estimate with confidence bands. We do not publish the exact scoring formula.

Yield Receipts are optional, customer-controlled proof cards. They are private by default. Revenue and domain are hidden on public links unless you explicitly publish and choose to show them. You can revoke a public receipt at any time.

Do not send sensitive personal data through Signal custom goals or revenue events. If you delete account or website data, associated receipts are deleted or anonymized according to our retention policy.

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Live Asset Radar raw events are deleted after about seven days; live presence rows expire when sessions go idle. When data is no longer needed, we delete or anonymize it.

We use technical and organizational measures to protect your data, including encryption of sensitive credentials, access controls, and row-level security on tenant data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise many of these in the app, or submit a verified request via our Data Requests page at /data-requests.

You can request deletion of your account and associated personal data via our Data Requests page at /data-requests, by emailing hi@learn.domains from the email on your account, or through in-app controls where available. We will process verified requests within 30 days where feasible, subject to legal retention requirements. Disconnecting an integration (such as Google) revokes our ongoing access to that source.

The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us so we can remove it.

If you install Learn Domains Signal on a website you operate, the snippet sends first-party events to Learn Domains so you can see pageviews, referrers, engagement, and AI referral traffic inside the app. You are responsible for using Signal in line with your own privacy obligations and any consent requirements that apply to your site and visitors.

• Signal collects page URLs (with common PII query parameters stripped), referrers, UTM tags, scroll depth milestones, engaged time milestones, and custom goals you trigger from your site.
• Signal stores a random session identifier in sessionStorage and a rotating anonymous visitor identifier in localStorage on the visitor's browser. It does not set third-party cookies and does not use invasive fingerprinting.
• Signal respects Do Not Track by limiting persistence and engagement tracking when the browser sends DNT=1.
• Learn Domains does not sell Signal data. It powers your Signal dashboard, growth order attribution estimates, and Asset Yield tracking inside the app.
• When you connect Stripe, revenue events that include a Stripe payment intent or charge ID may be verified against your account. Other revenue remains client-reported.

Live Asset Radar is optional. If you install the Radar snippet on a website you operate, it sends cookieless pageview and heartbeat events to app.learn.domains so you can see live visitor presence in your Command Center. Each connected asset receives its own site ID in the snippet.

• Radar does not set cookies and does not use localStorage or sessionStorage on your visitors' browsers.
• Radar collects page paths (with common sensitive query parameters stripped), page titles, referrers, UTM tags, coarse device category, and approximate country inferred from request metadata at ingestion. We do not store raw IP addresses in Radar tables.
• Radar does not collect form input, session replay, heatmaps, email addresses, or wallet addresses.
• Radar respects Do Not Track: the snippet does not send events when the browser sends DNT=1.
• You choose whether to install Radar and are responsible for any privacy notice or consent requirements that apply to your site and visitors.
• Learn Domains does not sell Radar data. It powers live Command Center visibility for your account only.

We and our processors may process data in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The latest version will always be available on this page.

Questions or privacy requests? Contact us at hi@learn.domains.