A Tiny Roar Privacy Policy
Prepared October 3, 2026. Effective date: October 4, 2026.
1. Who we are
A Tiny Roar LLC (“ATR,” “we,” “us”) is a limited liability company offering practical advisory services, workshops, courses, resources, and community experiences. Drop the mask. Keep the woman.
This notice explains how we handle personal information through atinyroar.com and our services.
Contact: [email protected]; A Tiny Roar LLC, PO Box 9, Twin Peaks, CA 92391.
2. Information we collect and why
We collect information you provide, information generated through your use of our services, and information from the providers that help us operate.
- Contact and account information: name, email, account details, and communication preferences, to communicate, maintain accounts, deliver resources, and manage subscriptions.
- Purchase and booking information: purchases, appointments, payment status, billing details, and credit balances, to fulfill orders and maintain business records. Payment providers process card details; do not send card numbers in messages.
- Advisory information: goals, circumstances, submitted materials, messages, session notes, and, with appropriate consent, recordings or transcripts, to prepare and deliver personalized advisory support.
- Information you choose to share about health or accessibility: for example, menopause, chronic illness, neurodivergence, or requested accommodations. We use relevant information to adapt our services, not to diagnose or treat you. Please share only what is needed; we do not require medical records to provide ordinary advisory support.
- Community and event information: contributions, attendance, access activity, and feedback, to operate and moderate experiences.
- Technical and engagement information: IP address, browser and device information, pages and links used, referral information, approximate location, and email interaction data, to operate and secure our services, understand engagement, and improve content.
We also use relevant information to prevent fraud, resolve disputes, maintain records, and comply with legal obligations. We do not use private advisory notes or health disclosures to build advertising audiences or make automated decisions with legal or similarly significant effects.
3. Email and inquiries
Where a form clearly explains that submitting it also subscribes you to ATR marketing, we use your email for the updates and offers described there, subject to applicable consent requirements. Where a separate choice is offered, we honor that choice. An inquiry does not authorize public use of its contents.
You may unsubscribe through marketing emails or contact us. We may still send necessary purchase, account, scheduling, security, or legal communications.
We keep a limited suppression record to respect your opt out. We obtain affirmative consent where required; an opt out opportunity does not replace that requirement.
4. Private notes, AI, and recording
We may use selected software providers, including AI assisted tools, to organize information, transcribe authorized sessions, and help prepare materials. A provider may process information even when our purpose is private reference and nothing is published.
Before recording or transcribing any session, including group sessions or webinars where participant information may be captured, we give affected participants clear notice and obtain legally required consent. This applies to initial capture and provider processing, not just later publication.
If you decline or withdraw consent, we stop the affected capture and discuss an alternative, such as written notes, a different format, or rescheduling. We do not treat a recording refusal as misconduct.
We limit information sent to AI services to what is reasonably needed. We use client information only in services and configurations reviewed for appropriate confidentiality, access, retention, and data use protections.
We do not authorize providers to use private client material to train general purpose models. We review AI assisted work; it does not replace our judgment.
Instructor presentations and demonstration screens may be recorded for future classes. We exclude participant images, names, voices, chat, and other identifying content from distributed recordings unless separately authorized in writing.
Turning off a camera alone does not prevent voice or chat capture. We review recordings and demonstration materials before distribution.
Instructor only workshop recordings and reusable teaching materials that contain no identifying participant information are kept separately from private client records and may be retained while they remain useful for teaching. The private client retention period does not automatically apply to those materials.
We do not publish or sell your story, testimonial, image, or identifying session material without specific written permission. We may teach general methods and use fictional or composite examples that do not reveal your identity or confidential circumstances.
5. Providers and other disclosures
We disclose information as needed to providers supporting website hosting, course/community delivery, payments, email, scheduling, meetings, transcription/AI assistance, storage, security, analytics, and social media management. Categories do not mean every provider receives every category of information.
If we enable a social inbox, the provider may receive comments or direct messages routed through it. Please avoid sending sensitive advisory details through social media. Providers such as financial institutions and social platforms may also act for their own purposes under their notices.
Authorized personnel and contractors may access information needed for their work, subject to appropriate confidentiality and access restrictions.
We may disclose information when required by law, to protect legal rights or safety, or during a business transaction, subject to applicable protections and restrictions on sensitive data. No clause here authorizes disclosures that applicable law prohibits.
We do not sell or rent our mailing list or private advisory records.
6. Cookies, analytics, and privacy signals
We use technologies for essential functionality, security, and analytics, including Google Analytics and Kajabi analytics. CAPTCHA or similar security services may process technical information to detect abuse. Cookie and analytics settings determine what providers receive.
You can manage browser cookies and use available site privacy controls. Blocking some technologies may affect features. An email unsubscribe does not turn off website tracking.
7. Retention and protection
We store information on our computer and in services such as Google Drive and Kajabi. We use two step sign in and multi factor authentication on many of the hardware and software systems we use.
We may move inactive files to a secured external hard drive to free computer storage space while keeping them within the applicable retention period.
No system is completely secure. This statement does not waive your rights or excuse duties we owe you.
We retain private session recordings, transcripts, and advisory notes throughout the client relationship and for two years after it ends, so we can reference prior discussions and provide continuity in our advisory support.
For this purpose, the relationship ends when the agreed advisory engagement is completed without an ongoing advisory arrangement, or when either party ends the relationship. We document the closing date and communicate it to the client. A pause between sessions alone does not end an ongoing advisory relationship.
At the end of that period, we delete these records unless a documented legal hold or applicable legal requirement requires longer retention.
We retain transaction, contract, consent, credit, and dispute records separately for their legitimate purposes. Applicable deletion duties, legal holds, and necessary legal retention can change these periods. We limit any extended retention to what is justified.
Records held by providers and backups follow managed deletion processes; we do not promise instantaneous erasure from every system. Where law requires downstream deletion, we address those copies too.
8. Your choices and requests
Contact [email protected] to request access, correction, deletion, or information about our practices, or to withdraw a consent.
Depending on your location and the applicable law, you may also have rights to portability, restriction, objection, opt out, appeal, or use of an authorized agent. These rights are subject to applicable conditions and exceptions, and not every statute applies to every business.
We verify identity proportionately, request only necessary information, and respond within applicable deadlines. We do not unlawfully discriminate or retaliate for exercising rights.
To request review of a denied request, reply to our response or email us with “Privacy appeal” in the subject; we provide any legally required appeal and regulator information.
Health data laws can impose additional requirements even on a nonmedical business. A general website acceptance does not replace legally required health data consent.
9. Communities, children, and locations
Other participants can see information you choose to post or share in group spaces. We set confidentiality expectations but cannot guarantee every participant will comply. Do not disclose another person's private information without authority.
Our services and accounts are for adults 18 and older. We do not knowingly collect information from children under 13. Contact us if a child has provided information so we can investigate and take appropriate action.
ATR operates in the United States. Providers may process information in other countries. We use legally required safeguards where applicable; using the website does not waive mandatory privacy rights. A future change in our operating location or international activities will be assessed before implementation.
10. Changes
We update the effective date when this policy changes and provide additional notice or obtain consent when required. Material new uses are not authorized merely because revised words appear on this page.