Legal
GenHERational Wealth Lab ("GWL," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Account information: When you create an account, we collect your name, email address, and password (stored securely via our authentication provider, Supabase).
Email list information: When you request a free guide, join a waitlist, or complete HER Blueprint LITE, we collect the email address and any first name you give us, along with which guide or entry point you came in through. We use this to deliver what you asked for and to send you our email updates. Every email we send includes an unsubscribe link, and unsubscribing stops the emails without affecting anything else.
Lab data: Content you enter through the Service (including your resource inventory, questionnaire responses, scoring inputs, and any notes) is stored in your account and used to provide the Service.
Purchase records: When you buy a GWL product through Stripe checkout on this site (or, before 25 October 2026, through our Stan store), we receive your name, email address, the product and the amount paid, so we can grant you access to what you bought. Card details stay with Stripe, or with Stan for those earlier purchases.
Usage events: We collect anonymized usage events (for example, when you complete onboarding, save a decision, or are shown or click a product recommendation) to understand how the Service is used and to improve it. These events are associated with your account for internal analytics only.
Technical data: Standard web server logs including IP addresses, browser type, and page visits may be collected by our hosting infrastructure (Netlify) and authentication provider (Supabase).
We do not sell your personal information to third parties. We do not use your Lab data (resource inventory, business information, scores) for advertising or marketing purposes.
Email addresses collected for our email list are also stored with MailerLite, the service we use to send email. Account emails such as sign-up confirmations and password resets are sent through MailerSend. Both process that information on our behalf and under their own privacy terms.
Your data is stored on Supabase, a cloud database platform. Supabase uses industry-standard security practices including encryption at rest and in transit. Access to your data is governed by Row Level Security (RLS) policies: your data is only accessible to you and to authorized server-side functions that operate the Service.
No security system is completely impenetrable. We implement reasonable safeguards but cannot guarantee the absolute security of your information.
We use the following third-party services to operate GWL:
We do not share your personal information with these providers beyond what is necessary to operate the Service.
The Service uses a session cookie set by Supabase Auth to maintain your login state. We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behavior across other websites.
We measure how the site is used ourselves, without a third-party analytics provider. Your browser stores a random identifier that is not tied to your name unless you are signed in, and we record the pages you view, the links you click, the site you arrived from and any campaign tag in the link. We do not record your IP address. This data is kept for 180 days and then deleted. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is recorded.
Depending on your jurisdiction, you may have the right to:
If you have a Lab account, you can download a copy of everything we hold about you and delete your account yourself from the Lab dashboard, under "Your data". Deleting your account removes your profile and Lab data immediately, removes you from our email list, and asks MailerLite to erase its copy. Purchase records are kept in anonymised form because we are required to keep a record that a sale happened.
If you do not have an account, or would rather ask us, contact us using the information below. We will respond within a reasonable timeframe.
We retain your account data for as long as your account is active. If you request deletion of your account, we will delete your personal information and Lab data within 30 days, except where retention is required by law or legitimate business necessity (such as financial records).
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from someone under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of the Service after changes constitutes your acceptance of the updated policy.
Questions or requests regarding your privacy may be directed to the contact information provided on our website. For deletion requests, please include "Data Deletion Request" in your subject line.