Privacy Policy

This Privacy Policy explains how AuthorityLayer LLC ("AuthorityLayer," "we," "us," "our") collects, uses, stores, and protects information when you visit www.authoritylayer.com (the "Marketing Site"), purchase the LinkedIn Profile System, or use app.authoritylayer.com (the "Client Workspace").

Summary

• We collect the information you choose to provide, such as your name, email address, LinkedIn profile content needed to deliver the LinkedIn Profile System, and limited payment information provided by Stripe after a successful purchase.
• We never see or store your full card number. Stripe handles that directly.
• We use secure Magic Link authentication, so you do not need to create or remember a password.
• Your data is stored securely and only used to deliver and support your order.
• We use Google Analytics, and cookie-free Vercel Web Analytics and Speed Insights, to see how people use and experience our website, and we never sell your personal information.

1. Information We Collect

Information You Provide

• Contact and account information: your name and email address, collected when you make an inquiry, complete Stripe Checkout, or otherwise communicate with us.
• Service Intake information: the onboarding information you choose to provide before production begins, including your current LinkedIn profile content, business or professional background, your goals, and any other information you choose to share that is relevant to the LinkedIn Profile System.
• Communications: messages you send us during the inquiry, qualification, or support process, and any revision feedback you submit during the revision window.

Analytics Information

AuthorityLayer's Marketing Site uses Google Analytics to help us understand how visitors use the site, such as which pages are viewed and how visitors found us. Google Analytics may collect information such as your approximate location, device and browser type, and the pages you visit. We use this information to understand how the Marketing Site is used and to improve its performance. AuthorityLayer does not use Google Analytics to intentionally identify individual visitors. See Section 8 (Cookies) for more detail on how this information is collected.

2. Payment Processing (Stripe)

All payments are processed by Stripe, a third-party payment processor. When you complete a purchase, Stripe collects and processes your payment card details directly. AuthorityLayer never receives or stores your full card number or other sensitive payment credentials.

After a successful payment, AuthorityLayer receives limited transaction information from Stripe via a secure, server-to-server webhook, including your email address, the Stripe Checkout Session ID, payment status, amount charged, currency, and related Stripe identifiers (such as customer and payment intent IDs). This information is stored server-only and is never exposed to or made visible within the Client Workspace.

3. Authentication

AuthorityLayer uses Magic Link authentication through Supabase Auth. Instead of a password, you receive a secure, single-use sign-in link by email when access to your Client Workspace is provided. AuthorityLayer does not create, store, or require a password for your Account.

4. Communications

We use your email address to send you:

• Your Magic Link and other access-related messages
• Order and delivery updates related to your LinkedIn Profile System
• Responses to support requests or revision feedback
• Optional account notifications, based on the notification preferences associated with your Account (email only)

5. How We Use Information

We use the information described above to:

• Set up and deliver the LinkedIn Profile System you purchased
• Provide access to, and support within, the Client Workspace
• Communicate with you about your order, deliverables, and revisions
• Maintain accurate business, billing, and order records
• Improve our internal production process and service quality
• Comply with legal, tax, and accounting obligations

We do not sell your personal information to third parties.

6. Data Storage and Security

Your information is stored in Supabase Postgres, which serves as AuthorityLayer's operational source of truth for platform data. Access is controlled through Row-Level Security (RLS) at the database level.

Sensitive data, including your Stripe billing identity and order records, is stored server-only and is never exposed to or queryable from the Client Workspace. Setting up your order and workspace access (creating your Account, Order, and related service records) happens entirely within protected, server-side Supabase infrastructure, never in client-side code.

No method of storage or transmission is 100% secure, and while we take reasonable measures to protect your information, we cannot guarantee absolute security.

7. Third-Party Services

AuthorityLayer relies on the following third-party service providers to operate the LinkedIn Profile System:

• Stripe: payment processing, secure hosted checkout, and related payment infrastructure
• Supabase: database hosting (Postgres), authentication (Magic Link), and server-side Edge Functions/RPCs
• Vercel: application hosting for the Marketing Site and Client Workspace
• Vercel Web Analytics: aggregated, cookie-free website traffic analytics for the Marketing Site
• Vercel Speed Insights: aggregated, cookie-free website performance monitoring for the Marketing Site
• Google Analytics: website usage analytics for the Marketing Site
• Resend: transactional email delivery

Each of these providers processes data under their own respective privacy and security practices. We encourage you to review the privacy policies of Stripe, Supabase, Resend, Google, Vercel, and the other third-party providers we use to better understand how they process information on our behalf.

8. Cookies

AuthorityLayer uses cookies to support two categories of functionality:

• Essential cookies: required for the Marketing Site and Client Workspace to work properly, including keeping you securely signed in after you use your Magic Link and enabling secure checkout through Stripe. These cookies cannot be disabled without affecting core functionality.
• Analytics cookies: set by Google Analytics on the Marketing Site to help us understand overall visitor traffic and usage patterns. These cookies do not include your name, email address, or other information that directly identifies you as an AuthorityLayer customer.

AuthorityLayer also uses Vercel Web Analytics and Vercel Speed Insightson the Marketing Site to understand aggregate site traffic and page performance. Unlike Google Analytics, these tools do not use cookies. They identify visitors using a temporary, non-persistent hash derived from the incoming request rather than a stored identifier, and they do not collect information that would allow us to reconstruct an individual's browsing session or identify them personally. Data collected may include page URL, referrer, approximate geolocation (such as country, region, or city), device type, operating system, browser, and page load performance metrics.

You can control or block cookies through your browser settings. Blocking essential cookies may prevent parts of the Marketing Site or Client Workspace from working correctly. Because Vercel Web Analytics and Speed Insights do not use cookies, browser cookie-blocking settings do not affect them.

9. Data Retention

AuthorityLayer retains your Account, order, and Service Intake information only for as long as necessary to provide the LinkedIn Profile System, support your Account, fulfill your order, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Billing and transaction records associated with Stripe payments are retained in line with standard recordkeeping requirements for financial records.

If you would like your information deleted sooner, contact us using the information in Section 14, and we will honor your request except where we are required by law to retain certain records.

10. Your Rights

Depending on your location, you may have rights to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to our legitimate business, legal, tax, and accounting recordkeeping needs
• Opt out of non-essential email communications (order- and account-related emails may still be sent as needed to deliver the service)

To exercise any of these rights, contact us using the information in Section 14.

11. Children's Privacy

The LinkedIn Profile System is intended for adults and business professionals and is not directed toward children. AuthorityLayer does not knowingly collect personal information from children, and if we learn that we have inadvertently done so, we will take steps to delete it.

12. International Data Transfers

Some of AuthorityLayer's third-party service providers, including infrastructure and payment providers, may process or store information in countries other than your own. Where applicable, AuthorityLayer relies on the safeguards and privacy commitments provided by those third-party providers when personal information is processed internationally.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or the LinkedIn Profile System. The "Effective Date" at the top of this document reflects the most recent revision. Material changes will be reflected by updating this page.

14. Contact Information

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to:

Email: hello@authoritylayer.com