← Back to recipeconsolellc.com

Privacy Policy — The Cornerstone Admin Power Toolkit

Effective date: June 9, 2026 Controller: Recipe Console LLC, a Georgia limited liability company ("we," "us," "our") Contact: controller@recipeconsolellc.com

Plain-English summary (informational only — the policy below governs): We collect the email address you give us, and Gumroad collects what it needs to process your payment. We don't track you, we don't sell your data, and we don't share it with third parties except the few processors we have to use to run the business (Gumroad for payments, an email-newsletter provider, our website host). You can ask us to delete your data at any time.

1. Scope

This Privacy Policy describes how Recipe Console LLC ("we") collects, uses, and shares personal information in connection with:

• The website at https://recipeconsolellc.com (the Website)
• The "Cornerstone Admin Power Toolkit" digital product (the Product) sold via Gumroad
• The pre-launch and post-launch email newsletter (the Newsletter)
• Customer support and refund-handling correspondence

This policy applies regardless of your location. We process personal data in the United States. If you are in the European Economic Area (EEA), the United Kingdom, California, or another jurisdiction with specific privacy rights, please see Section 7 for your additional rights.

2. What we collect

We collect only what's necessary to operate the business. Specifically:

2a. Information you give us directly

• Email address — required when you subscribe to the Newsletter or contact us for support. Optional source-tag (e.g., "from LinkedIn post," "from Carrd hero").
• Name, organization, role — only if you voluntarily provide it (e.g., in a support email or testimonial submission). Not required.
• Content of correspondence — emails you send to us are retained for support-history purposes.

2b. Information collected automatically when you visit the Website

• Server logs — your IP address, browser user-agent, requested URLs, timestamps. Retained ≤30 days for security and abuse monitoring.
• Carrd analytics (if enabled) — aggregated page views and traffic sources via Carrd's built-in analytics. No third-party tracker cookies are set on the Website's free tier; if we enable Plausible or Simple Analytics on the Pro tier, those are cookieless and GDPR-compliant by design.
• No cross-site tracking — we do not embed Facebook Pixel, Google Analytics, or similar trackers.

2c. Information collected when you purchase the Product

The Product is sold via Gumroad as the merchant of record. Gumroad collects the payment, billing, and tax-residency information necessary to process your purchase, including your name, email address, payment card details, and billing country/state. Gumroad's processing of that information is governed by Gumroad's Privacy Policy. We do not have access to your full payment card number at any time.

After purchase, Gumroad shares with us: your email address, your order ID, the product purchased, the price paid, the country of purchase (for our tax-reporting reconciliation), and any optional license-field input you provided. We use this information solely to deliver the Product, fulfill the lifetime-updates commitment, handle refunds, and provide customer support.

3. How we use your information

We use personal information only for these purposes:

• Delivering the Product — fulfilling your purchase and pushing free updates via Gumroad.
• Communicating with you — responding to support requests, refund requests, license inquiries.
• Newsletter — sending the Newsletter (pre-launch notifications, sample chapters, product updates, occasional related content) to subscribers who opted in.
• Operations and security — preventing fraud and abuse, debugging the Website, complying with legal obligations.
• Aggregate analytics — understanding aggregate Website traffic and purchase patterns. We do not use personal data for retargeting or behavioral advertising.

We do not sell, rent, or trade personal information. We do not use personal information to train AI or machine-learning models.

3a. Legal bases for processing (EEA/UK applicants)

For individuals in the EEA or UK, our legal bases under GDPR Article 6 are:

• Performance of a contract — processing your purchase, delivering the Product, providing updates and support (Art. 6(1)(b))
• Consent — Newsletter subscription (Art. 6(1)(a)). You may withdraw consent at any time.
• Legitimate interests — fraud prevention, security, basic Website analytics, defending legal claims (Art. 6(1)(f))
• Legal obligation — tax records, accounting records (Art. 6(1)(c))

4. Who we share information with

We share personal information only with the processors and counterparties listed below, only as needed to operate the business.

We do not share personal information for advertising, marketing-list rental, or any commercial purpose outside the list above. If we engage a new processor, this list will be updated.

5. Retention

We retain personal information only as long as necessary:

• Purchase records — for the lesser of (a) the time we offer lifetime updates on the Product or (b) seven (7) years, whichever is longer, to satisfy tax and accounting record-keeping obligations.
• Newsletter subscribers — until you unsubscribe. Unsubscribe links appear in every Newsletter email. We retain a record of your unsubscribe to honor your request.
• Support correspondence — five (5) years after the last interaction.
• Server logs — ≤30 days.
• Refund records — seven (7) years, to satisfy accounting record-keeping obligations.

We may retain a minimal record of de-identified or aggregated data indefinitely for product-improvement purposes.

6. Security

We take commercially reasonable steps to protect personal information:

• Gumroad, our payment processor, is PCI-DSS compliant; we never see your full card number.
• All Website traffic is served over HTTPS.
• Our email and file systems are protected by strong passwords and two-factor authentication.
• Personal information is accessed only by the owners and operators of Recipe Console LLC.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

7. Your rights

7a. Everyone

You may at any time:

• Ask us what personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information (subject to legal retention obligations — see Section 5)
• Withdraw consent for the Newsletter (use the unsubscribe link in any Newsletter email, or contact us)
• Opt out of having your information shared with the processors above (note: this generally means we cannot continue providing the Product or Newsletter)

To exercise any of these rights, contact controller@recipeconsolellc.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request that could expose personal data.

7b. EEA / UK additional rights

If you are in the EEA or UK, you also have the right to:

• Object to processing based on legitimate interests (Art. 21 GDPR)
• Restrict processing in certain circumstances (Art. 18 GDPR)
• Data portability — receive your data in a machine-readable format (Art. 20 GDPR)
• Lodge a complaint with your local data protection supervisory authority

7c. California (CCPA / CPRA) additional rights

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it (Section 2 and Section 3 of this policy)
• Request deletion of your personal information (Section 7a)
• Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
• Non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of service if you exercise a CCPA right

7d. Other US states

If you are a resident of Colorado, Connecticut, Utah, Virginia, or any other state with a comprehensive privacy law, you have rights substantially similar to those in Section 7a/7b. Contact controller@recipeconsolellc.com to exercise them.

8. Children

The Product and Website are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us and we will delete it.

9. International transfers

We are based in the United States and store personal data in the United States. If you access the Website or purchase the Product from outside the United States, your personal information will be transferred to the United States. Where required by law (e.g., for transfers from the EEA), we rely on Standard Contractual Clauses or equivalent mechanisms with our processors.

10. Cookies

The Website may set strictly necessary cookies (for example, to remember a CSRF token) and, on the Pro tier, anonymous analytics cookies via Plausible or Simple Analytics. We do not set advertising, retargeting, or social-media tracking cookies. You can configure your browser to refuse cookies; the Website will still function but some convenience features may be unavailable.

11. Do Not Track

We honor "Do Not Track" browser signals by not enabling any optional analytics for sessions that send the signal.

12. Changes to this Policy

We may update this Policy from time to time. The "Effective date" above will be updated, and material changes will be communicated via the Newsletter and a notice on the Website. Continued use of the Product or Website after a revision constitutes acceptance of the revised Policy.

13. Contact

Privacy-related requests and questions: Email: controller@recipeconsolellc.com Mail: Recipe Console LLC, 1320 Stanley St, Apt 6405, Sugar Hill, GA 30518

For purchase-related inquiries, support requests, or refund requests, use controller@recipeconsolellc.com (see Terms of Sale).

This document is a template drafted as part of the Cornerstone Admin Power Toolkit launch preparation. It is not legal advice. Have it reviewed by an attorney familiar with US, EU, and Georgia privacy law before deploying — particularly the EEA/UK rights section (Section 7b) and the CCPA section (Section 7c) if you expect non-Georgia traffic.