Privacy Policy

1. Introduction

Finding Yoga ("we," "us," or "our") is operated by Trident Partners LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at finding.yoga and use our services. Our mailing address is 1209 Mountain Road PL NE, STE R, Albuquerque, NM 87110.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. Teacher accounts may also include business name, location, yoga styles, biography, and profile photos.

2.2 Contact and Communication Data

We store contact information submitted through teacher websites in our PostgreSQL database. This includes names, email addresses, phone numbers, and message content provided by visitors.

2.3 Billing Information

Payment processing is handled by Stripe. We do not store credit card numbers on our servers. Stripe collects and processes payment information in accordance with their privacy policy. We retain transaction records, plan selections, and billing history.

2.4 Usage Data

We automatically collect information about your device, browser, IP address, and interactions with our platform. This helps us improve the service and troubleshoot issues.

3. How We Use Your Information

• To provide and maintain our website builder and directory service
• To process transactions and manage subscriptions via Stripe
• To send transactional emails through Resend (e.g., account verification, password resets, billing receipts)
• To enable teachers to communicate with their contacts and students
• To improve our platform and develop new features
• To comply with legal obligations

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Neon (neon.tech) with encryption at rest and in transit. Our application is hosted on Vercel. We implement industry-standard security measures including encrypted connections (TLS), secure authentication, and regular security reviews.

5. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — Payment processing and subscription management
• Resend — Transactional and marketing email delivery
• Vercel — Application hosting and content delivery
• Neon — Database hosting (PostgreSQL)
• Google Calendar — Calendar scheduling for teachers who choose to connect their Google account
• Google Meet — Video calls, recording, and transcription for ambassador kick-off and consultation calls (see Section 12)

If a teacher or host connects their Google Calendar to Finding Yoga, we create an event on their connected calendar when a member books a class or session with them. That calendar event includes the member's name and email address, which are written directly to the host's Google Calendar and become subject to Google's own privacy practices in addition to this Policy. We only share the information necessary to identify the booking and do not use this connection to access, read, or store the rest of the host's calendar data.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

6.1 Requests from non-account-holders

If you do not have an account but believe we hold personal information about you (for example, because you submitted a contact form on a teacher's website), you can request access, correction, or deletion by emailing privacy@findingyoga.org. Include enough detail (name, email address used, and the teacher site involved, if known) for us to locate your record. We will verify your identity before acting on the request and respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. After account deletion, we may retain anonymized usage data for analytics purposes. Billing records are retained as required by applicable tax and financial regulations.

Recorded onboarding calls are retained on a separate schedule. We keep our transcript of a call for three (3) years from the date of that call, and that clock runs from the call date rather than from the life of your account — so a transcript can outlast account deletion. The recording itself is held in the hosting ambassador's Google Workspace account and is deleted on request. See Section 12 for the full detail and for how to ask us to delete either one.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can control cookie preferences through your browser settings.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. California Residents (CCPA / CPRA)

We do not sell or share your personal information as defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). California residents have the right to know what personal information we collect, request deletion, and request correction. To exercise these rights, contact privacy@findingyoga.org.

11. European Economic Area, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you additional rights. Our lawful bases for processing your personal data are:

• Legitimate interest — for transactional processing necessary to operate the Service, including account management, billing, security, fraud prevention, and product improvement
• Consent — for marketing communications and other optional features you choose to turn on; you may withdraw consent at any time without affecting the lawfulness of prior processing
• Contract — to perform the services you have signed up for
• Legal obligation — where required by applicable law

You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interest. To exercise these rights or to lodge a complaint with a supervisory authority, contact privacy@findingyoga.org.

12. Recording of Kick-Off and Consultation Calls

When you meet with an ambassador for a kick-off call or other onboarding consultation, that call is recorded and transcribed. We do this to keep an accurate record of what you asked for during onboarding, in case a question comes up later about your site's content, and so our ambassadors can focus on the conversation instead of taking notes.

Recording and transcription happen inside Google Meet, the video platform we use to host these calls. Google acts as our processor for the resulting recording and transcript data and does not use it for its own purposes. Google Meet displays its own on-screen recording indicator to every participant for as long as the call is being recorded.

We keep our own internal copy of the call transcript for three (3) years from the date of the call, after which we delete it. That transcript is an internal record used by our ambassadors and staff; it is not currently visible to you as a member. If we change that in the future, we will update this Policy first.

The recording itself is not stored on Finding Yoga's servers. Google Meet saves it to the Google Workspace account of the ambassador who hosted your call, and we keep only a link to it. Because the file lives in that account rather than in our own systems, we do not delete it on a schedule — we delete it when you ask us to, as described below.

Kick-off calls routinely touch on things like injuries, health conditions, or other personal circumstances relevant to your practice. If you share that kind of information on a recorded call, it becomes part of the recording and transcript like anything else discussed. We only use it to support your onboarding and site build.

To request deletion of a specific call recording, or early deletion of the transcript before the three-year point, email privacy@findingyoga.org. This is the route for having a recording removed, and we treat it as a real request rather than a formality: we will delete the recording from the ambassador's Google Workspace account, delete our transcript of that call, and confirm to you when it is done. We respond within 30 days. We will only decline if we have to keep the material because of an active dispute or a legal obligation, and we will tell you if that happens.

13. Florida All-Party Consent for Call Recording

Florida law (the Security of Communications Act, Fla. Stat. § 934.03) requires the consent of every party to a call before it can be recorded. At the start of every kick-off or consultation call, our ambassador will state out loud that the call is being recorded and transcribed, in addition to the automatic recording notice Google Meet displays to everyone on the call.

If you continue on the call after that announcement, you are agreeing to be recorded. You can ask your ambassador to stop recording at any point, including partway through the call, and they will stop it immediately. Recording up to that point cannot be undone, but nothing after that point will be recorded.

14. European Economic Area, UK, and Switzerland — Recorded Calls

If you are located in the European Economic Area, the United Kingdom, or Switzerland, this section describes how recording works for your onboarding calls. Recording is part of how we run kick-off and consultation calls: every such call is recorded and transcribed by default, our ambassador announces it out loud at the start, and we use the result only to support your onboarding and your site build, as described in Section 12. We do not use recordings or transcripts for marketing, profiling, or automated decision-making, and we do not sell or share them.

You can object to being recorded, and you do not have to give a reason. Tell your ambassador at the start of the call, or partway through it, and they will turn recording off on the spot and take written notes instead — you will still get the same call and the same onboarding. You can also object in writing, or ask us to delete a recording we already hold, using the contact details in Section 11. We respond within 30 days.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date above.

16. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@findingyoga.org, or by mail at Trident Partners LLC, 1209 Mountain Road PL NE, STE R, Albuquerque, NM 87110.