Our privacy notice

Version sbca-privacy-v1 · Effective September 26, 2026

The short version

We collect what we need to sell you the kit, deliver it and help you: mainly your name, email and what you bought. Stripe handles your card; we never see the full number. AI assistants help us answer you. A Meta (Facebook) tool measures our ads. Email support@smallbusinesscommunity.org to see, fix or delete your information.

Who we are

The Small Business Community Association (SBCA) is run by Sea Panda Industries LLC, 1225 North Arizona Ave #4028, Gilbert, AZ 85233. We're responsible for the information described here. Contact: support@smallbusinesscommunity.org.

What we collect

When you buy: your name, email address, phone number if you give it, what you bought, when, and how much you paid. Your card details go straight to our payment processor, Stripe. We only see things like the card type and last 4 digits.
When you write to us: your message and our reply.
When you visit our website: our web server keeps a standard log (your internet address, the page, the date and time, and your browser type). The Meta tool described below also collects information about your visit.

How we use it

To take your payment, deliver what you bought, and send receipts.
To answer your questions and handle refunds.
To send occasional emails about SBCA (you can unsubscribe anytime).
To measure whether our ads work.
To prevent fraud and enforce our terms, including blocks after a payment dispute.

AI and your information

SBCA is run with AI. Most of our emails, replies and member messages are written by AI assistants and signed "The SBCA team". Rich Thurman hosts the live lessons and office hours himself.

That means AI assistants read the messages you send us, along with the purchase details needed to answer you. These assistants run on outside AI model providers, which we use under their business terms. We give them only what the task needs.

We use a few companies to run SBCA. They handle your information for us:

Stripe runs our checkout page, processes payments and sends your receipt. If you pick another payment option at checkout (such as Klarna), that company gets what it needs to process your payment.
HighLevel runs our contact list and email (it uses Mailgun to deliver email).
Microsoft 365 holds our support mailbox.
The outside AI model providers described above.
Meta, for ad measurement (see the next section).

We also share information:

With your bank or card company if you dispute a charge. We send your receipt, the terms in effect when you bought, and our records of your download.
If the law requires it.
With a new owner, if SBCA is ever sold.

Meta (Facebook) and ads

Our website uses the Meta Pixel, a tool from Meta (Facebook's parent company). It tells Meta when you visit our pages, along with details about your browser and device. When you buy, we may also tell Meta that a purchase happened, with the amount, the product, and a scrambled (hashed) copy of your email and phone number, so Meta can match it to our ads. Meta can collect information about your activity across different websites, including ours, and uses it under its own privacy policy.

You can change your ad settings in your Facebook or Instagram account, or block tracking tools in your browser.

"Do Not Track": our website doesn't currently change what it does when your browser sends a "Do Not Track" signal.

Emails and texts

We send receipts and other emails about your purchase even if you unsubscribe from our promotional emails. Unsubscribing from promotional email takes effect within 24 hours.

We don't send text messages today. If we start, we'll ask for your permission separately, and replying STOP will end all texts.

How long we keep it

Orders, payments and refunds: as long as accounting and legal rules require.
Website server logs: up to 90 days.
If you're blocked after a payment dispute, we keep the email addresses and phone numbers needed to keep that block in place.
Everything else: until you ask us to delete it, or we no longer need it.

Seeing, fixing or deleting your information

Email support@smallbusinesscommunity.org to ask for a copy of your information, to correct it, or to delete it. We reply within 1 business day. When we delete your information, we still keep the records listed above that we're required to keep, or that we need to keep a block in place.

Children, security and changes

Children: SBCA is for adults 18 and over. We don't knowingly collect information from children.

Security: we limit who can see your information and use reputable providers. No system is perfectly secure, so please tell us at support@smallbusinesscommunity.org if you think something's wrong.

Changes: if we change this notice, we post the new version here with a new version number and date. For important changes, we also email our customers.