Privacy Policy

1. Scope

This Privacy Policy explains how ABAvisor LLC ("ABAvisor," "we," "us") collects, uses, shares, and protects information when you use abavisor.com and our related services.

ABAvisor is an educational publisher and professional training provider. We are not a healthcare provider, and this policy does not describe the handling of anyone's health records — because we do not collect them. See section 3.

2. Information we collect

Account information. When you create an account, we collect your email address and, if you provide it, your name. Authentication is handled by Supabase. We store a profile record containing your email, name, role, and membership status.

Saved resources. If you bookmark a resource, we store the association between your account and that resource so your dashboard can display it. This records which articles or templates you saved — nothing about any client.

Contact form submissions. When you write to us, we store your name, email address, the role you describe, your message, any training interest you name, and your confirmation that the message contains no client information.

Payment information. Premium subscriptions are processed by Stripe. Stripe collects and handles your card details directly — we never receive or store your full card number. We store a Stripe customer identifier, subscription status, price identifier, and current period end date so we know what access to grant.

Technical information. Our hosting infrastructure automatically logs standard request data such as IP address, browser type, referring page, and timestamps. This is used for security, debugging, and reliability.

3. Information we do not collect

We do not collect, request, store, or process:

• Protected health information (PHI)
• Client, patient, learner, or supervisee names or identifying details
• Session notes, treatment plans, assessments, or any clinical records
• Any information about the individuals you serve professionally

ABAvisor is not a HIPAA covered entity or business associate. Our contact form requires an explicit confirmation that your message contains no client information before it can be submitted. Please do not send us such information through any channel. If you do, we may delete it.

We also do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. How we use information

We use the information described above to:

• Create and maintain your account and authenticate you
• Provide the resource library and deliver content appropriate to your access level
• Process subscription payments and manage membership status
• Respond to your questions and follow up about training
• Maintain security, prevent abuse, debug problems, and keep the site reliable
• Meet our legal, tax, and recordkeeping obligations

We do not use your information for automated decision-making that produces legal or similarly significant effects.

5. Cookies

We use cookies only where they are needed for the site to function:

• Authentication cookies set by Supabase, which keep you signed in across pages
• Stripe cookies set during checkout, used for payment processing and fraud prevention

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics profiling. Blocking cookies entirely will prevent you from signing in.

6. Who we share information with

We share information only with service providers who need it to operate ABAvisor, and only for that purpose:

Provider	Purpose	What they receive
Supabase	Hosting, database, authentication	Account details, saved resources, contact submissions
Stripe	Payment processing and subscription billing	Name, email, payment details you enter, subscription records
YouTube (Google)	Embedded video playback	Standard request data when you play an embedded video

We may also disclose information when required by law, valid legal process, or to protect our rights, safety, or property — and in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any change.

We do not sell your personal information to anyone.

7. How long we keep information

• Account and profile data — kept while your account is active, and deleted within 30 days of your request to delete it.
• Saved resources — deleted with your account.
• Contact form submissions — retained for seven (7) years for business recordkeeping, then deleted.
• Payment and subscription records — retained as long as required by tax and accounting law, typically seven years.
• Server logs — retained on a short rolling basis by our hosting provider.

8. Security

We protect information using encryption in transit (HTTPS), database-level row security so users can only read their own records, restricted administrative access, and payment handling delegated to Stripe so card data never reaches our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password.

9. Your rights

We extend the following rights to every ABAvisor user, wherever you live — not only to residents of jurisdictions that require them:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to fix information that is inaccurate
• Deletion — ask us to delete your account and associated personal information
• Portability — request your information in a portable format
• Opt out of marketing — unsubscribe from any marketing email at any time
• No retaliation — we will not degrade your service for exercising these rights

To exercise any of these, email abavisor@gmail.com. We will verify your identity by confirming control of the email address on your account, and will respond within 45 days.

California residents. The CCPA/CPRA gives California residents rights to know what personal information is collected and how it is used, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. We do not use sensitive personal information for purposes requiring a limitation right. You may exercise your rights at the address above, or designate an authorized agent to act for you.

10. Visitors outside the United States

ABAvisor is based in the United States, and your information is processed and stored in the United States, where privacy laws may differ from those where you live. By using the Services, you consent to that transfer and processing.

The Services are directed to users in the United States. We do not target, market to, or offer goods or services to individuals in the European Union, the European Economic Area, or the United Kingdom, and we do not monitor the behavior of individuals in those regions. Accordingly, we do not represent that we operate a GDPR compliance program. The rights in section 9 are available to you regardless of where you are located.

11. Children

The Services are intended for professionals and adult caregivers and are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Note that although our educational content concerns work with children, we do not collect information about any child. See section 3.

12. Changes to this policy

We may update this policy. When we do, we will revise the "Last updated" date above, and will provide additional notice through the Services or by email for material changes. Your continued use after an update means you accept it.

13. Contact

Questions, requests, or complaints about privacy:

• Entity: ABAvisor LLC
• Email: abavisor@gmail.com
• Governing law: State of Georgia, United States

Please do not include client or patient information in your message.