Privacy Policy

1. Introduction

Welcome to GenAI Unplugged ("we," "our," or "us"), operated by GENAI UNPLUGGED LLC. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website at www.genaiunplugged.com (the "Website"), use our digital products, or participate in our affiliate program.

By using our Website, purchasing our products, or joining our affiliate program, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Newsletter Subscription: When you subscribe to our newsletter through the Substack embed on our Website, you voluntarily provide your email address and any other information requested by Substack. This information is collected and managed by Substack, not by us directly.

Contact Information: If you contact us via email at [email protected], we collect the information you provide in your message, including your name, email address, and message content.

Form Submissions: When you submit applications or inquiry forms on our Website (such as the Academy application or Affiliate program application), we collect the information you provide, including your name, email address, and any other fields in the form. This data is stored securely on our servers and used solely for the purposes described in the form.

Affiliate Program Applications: If you apply to our affiliate program, we collect your name, email address, PayPal email (if provided), promotion channels, and any additional notes you share. This information is used to manage your affiliate relationship, generate your discount code, track sales, and process commission payouts.

Affiliate Dashboard: Approved affiliates can sign in to a dashboard at genaiunplugged.com/affiliates/dashboard/ using passwordless magic-link authentication. When you sign in, we set an essential session cookie (aff_session) for 30 days to keep you authenticated. Within the dashboard, you can view your personalized product affiliate links, copy ready-to-share text, and update your PayPal payout email. We store a record of qualifying sales attributed to your discount code (order ID, product name, sale total, commission amount) so we can calculate and pay your monthly commissions accurately.

Free Tools (Wall of Love, Brand Voice Generator, The PluggedIn MCP, Substack Notes MCP): We operate free tools accessible through our Website. Each tool has its own privacy policy with full details, linked from within the tool. In summary:

• Wall of Love collects your email address for authentication (via magic link) and may import it into our Substack newsletter. Uploaded images and testimonial content are stored on our servers. A session cookie (wol_session) is set for 30 days.
• Brand Voice Generator collects your email, brand name, and an optional URL for voice-profile generation; a session cookie (bv_session) is set for 30 days; the email is enrolled in both our Substack newsletter and the CoWrite with AI Substack newsletter (distribution partner) — you can unsubscribe from either list at any time.
• The PluggedIn MCP authenticates your Substack-subscriber email via magic link, mints OAuth tokens stored server-side in Cloudflare KV, and writes a minimal audit row ({email, tool_name, model_or_provider, status, timestamp}) to Cloudflare D1 for each tool call (90-day retention). It explicitly does not store any third-party API keys you may pass via X-BYOK-* headers. A session cookie (mcp_account_session) is set for 7 days for the /account UI only.
• Substack Notes MCP authenticates your GenAI Unplugged subscriber email via magic link, mints OAuth tokens stored in Cloudflare KV, and writes a minimal audit row ({email, tool_name, status, timestamp}) to Cloudflare D1 per tool call (90-day retention). It never stores your Substack session cookie (substack.sid) — the cookie is forwarded to Substack per-request and immediately dropped.
  Important: This tool uses Substack's unofficial internal API and may violate Substack's Terms of Service. Use at your own risk.

For complete details, see each tool's privacy policy at genaiunplugged.com/wall-of-love/privacy.html, brandvoice.genaiunplugged.com/privacy, mcp.genaiunplugged.com/privacy, and substackmcp.genaiunplugged.com/privacy.

Product Purchases: When you purchase our digital products, your payment is processed by the storefront used for that product. For products sold on our primary store at store.genaiunplugged.com (powered by Lemon Squeezy), Lemon Squeezy collects your payment information, billing address, and email address and shares order details with us for fulfillment. For co-brand products sold on third-party storefronts (currently Visual Brand Blueprint on Gumroad), the third-party storefront is the payment processor and collects your payment data under its own privacy terms; we receive your name, email, and purchase details from the storefront for fulfillment. In all cases, we do not directly collect or store payment card information. Co-brand marketing partners (for example, AI Meets Girlboss for Visual Brand Blueprint) do not receive or process your purchase or customer data.

Visual Brand Blueprint (co-brand paid product): We operate Visual Brand Blueprint as a paid co-brand product with AI Meets Girlboss as a marketing partner only (no data flow to the partner). Purchasers complete an intake form; uploaded inputs and AI-generated Blueprint PDFs are stored on our infrastructure; a session cookie (vbb_session) is set for 30 days. For complete details, see the product-specific privacy policy at genaiunplugged.com/visual-brand-blueprint/privacy.

2.2 Information Collected Automatically

Website Analytics: We use Google Analytics 4 (GA4) to understand how visitors use our Website. When you consent to analytics cookies, GA4 may automatically collect the following information:

• Device and browser information: Device type, operating system, browser type and version, screen resolution
• Usage data: Pages visited, time spent on pages, referring website, click interactions
• Approximate location: City/region-level location derived from your IP address (your full IP address is not stored by GA4)
• Session information: Session duration, number of pages viewed, bounce rate

This data is collected through cookies set by Google Analytics. The primary cookies used are:

Essential Authentication Cookies: When you sign in to a free tool or the Affiliate Dashboard, we set an essential, HTTP-only session cookie that does not require consent because it is strictly necessary to keep you signed in. These cookies do not track you across other sites and are not used for analytics or advertising:

Cookie Consent: We only load Google Analytics after you provide consent through our cookie banner. If you decline cookies, no analytics data is collected and no tracking scripts are loaded.

Third-Party Services: The Substack newsletter embed may collect information about your interaction with the embedded form, including cookies, in accordance with Substack's own privacy policy. We recommend reviewing Substack's Privacy Policy for details.

2.3 Information We Do NOT Collect

• We do not collect personal information beyond what you voluntarily provide
• We do not store your full IP address (GA4 anonymizes IP addresses)
• We do not use analytics cookies without your prior consent
• We do not sell, rent, or share analytics data with third parties for marketing purposes
• We do not store payment card numbers, CVVs, or bank account details

3. How We Use Your Information

We use the information we collect for the following purposes:

• Newsletter Communications: To send you our newsletter content via Substack
• Customer Support: To respond to your inquiries and provide support
• Product Delivery: To fulfill digital product purchases and provide access to purchased content
• Affiliate Program Management: To manage affiliate relationships, generate and track discount codes, calculate commissions, and process payouts
• Form Processing: To review and respond to applications submitted through our Website
• Transactional Emails: To send order confirmations, affiliate sale notifications, payout summaries, and other service-related communications via Amazon SES
• Legal Compliance: To comply with applicable laws and regulations
• Business Operations: To operate and improve our Website and services

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We use the following service providers who may process your data on our behalf:

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

Business Transfers: If GENAI UNPLUGGED LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

External Links: Our Website may contain links to external services, including our product store at store.genaiunplugged.com (powered by Lemon Squeezy). When you click on these links and visit third-party websites, you are subject to their privacy policies, not ours.

5. Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction, including:

• Secure server infrastructure hosted on Oracle Cloud
• Environment variables and credentials stored with restrictive file permissions
• HTTPS encryption for all web traffic
• Rate limiting and bot protection on form submissions

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Newsletter Subscriptions: Substack retains your subscription information until you unsubscribe. You can unsubscribe at any time using the link provided in every newsletter email.

Email Correspondence: We retain emails sent to us for customer support purposes for as long as necessary to resolve your inquiry.

Form Submissions: Application data (Academy, Affiliate) is retained for as long as the relationship is active and for a reasonable period afterward for record-keeping purposes.

Affiliate Data: Affiliate program data, including sales records and payout history, is retained for the duration of your participation in the program and for a minimum of three (3) years afterward for tax and accounting purposes.

Purchase Records: Product purchase records are retained for as long as necessary to provide support and for tax and accounting purposes.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: You can request access to the personal information we hold about you.

Correction: You can request that we correct any inaccurate or incomplete information.

Deletion: You can request that we delete your personal information, subject to certain legal exceptions (such as tax record-keeping requirements).

Opt-Out: You can unsubscribe from our newsletter at any time by clicking the "unsubscribe" link in any newsletter email.

California Residents: If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.

European Residents: If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability.

To exercise any of these rights, please contact us at [email protected].

8. Children's Privacy

Our Website and products are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

9. International Data Transfers

GENAI UNPLUGGED LLC is based in Pennsylvania, USA. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

10. Third-Party Services

Our Website and products use the following third-party services:

Google Analytics: We use Google Analytics 4 (GA4) to analyze Website traffic and usage patterns. Google may process your data on servers located in the United States and other countries. Google Analytics is only activated after you consent to analytics cookies via our cookie banner. Review Google's privacy practices at policies.google.com/privacy.

Substack: We use Substack to manage and deliver our newsletter. Substack may collect and process your information according to its own privacy policy. Review Substack's privacy practices at substack.com/privacy.

Lemon Squeezy (store.genaiunplugged.com): Our product store at store.genaiunplugged.com is powered by Lemon Squeezy. Lemon Squeezy processes payments, manages product delivery, and handles affiliate tracking according to its own privacy policy. We do not collect or store payment information directly. Review Lemon Squeezy's privacy practices at lemonsqueezy.com/privacy.

Amazon Web Services (SES): We use Amazon Simple Email Service (SES) to send transactional emails, including form submission notifications, affiliate sale alerts, and payout summaries. Amazon SES processes email addresses and message content for delivery purposes. Review AWS's privacy practices at aws.amazon.com/privacy.

PayPal: We use PayPal to process affiliate commission payouts. When we send you a payout, PayPal processes the transaction according to its own privacy policy. Review PayPal's privacy practices at paypal.com/us/legalhub/privacy-full.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: