Privacy Policy — Boss Daddy Life

Boss Daddy LLC, an Illinois limited liability company doing business as Boss Daddy Life ("we," "us," or "our"), operates bossdaddylife.com. This page explains what we collect, how we use it, and the rights you have over your data. We've tried to write this in plain English. If anything is unclear, email us and we'll clear it up.

1. What We Collect

What You Give Us Directly

Account info: Email and password when you sign up.
Comments: Anything you post in the comments on a review or guide.
Contact: Your name and email if you write to us.
Newsletter: Your email if you subscribe to the list.

What's Collected Automatically

Usage: Pages visited, time on page, clicks, and where you came from — standard web analytics.
Device: Browser, operating system, and IP address.
Cookies: Small files stored on your device to keep you logged in and to understand how the site is used (see Section 4).

What Third Parties Share With Us

If you click an affiliate link and make a purchase, the affiliate network may send us aggregate numbers (e.g., conversion counts). We do not see the details of your purchase.

2. What We Use It For

Creating and running your account
Publishing comments you submit
Sending newsletters or updates you asked for
Answering questions and support requests
Understanding how the site is used so we can improve it
Meeting legal obligations under federal and Illinois law
Enforcing our Terms of Use

We do not sell your personal data. We do not build advertising profiles on you. We do not run targeted ads against your behavior on this site.

3. AI Tools and Your Data

We use AI tools — specifically Anthropic's Claude — to help draft and research content for the site. Here's what that means for your data:

Your personal data is not passed to AI. We don't feed user accounts, emails, comments, or browsing history into AI tools.
AI is used internally for content creation only. It is not used for personalization, user profiling, or deciding what content to show a specific user.
AI does not make editorial decisions. Every AI-assisted piece is reviewed and approved by a human before publication. See our Editorial Standards for details.

4. Cookies

Two types:

Essential cookies: Needed for the site to work (e.g., keeping you logged in). These cannot be disabled without breaking functionality.
Analytics cookies: Help us see traffic and usage patterns. You can disable these in your browser settings.

You control cookies through your browser settings. If you disable essential cookies, you won't be able to log in or use member features.

5. Affiliate Links and Third-Party Services

This site has affiliate links. Clicking one sends you to a third-party site (like Amazon) that has its own privacy policy. We are not responsible for how third-party sites handle your data — read their policies before you buy.

We use these third-party services to run the site:

Supabase — authentication and database
Vercel — website hosting
Resend — transactional and newsletter email delivery
Cloudflare — DNS and email routing
Upstash Redis — rate limiting (no personal data stored)
Anthropic (Claude) — AI content drafting and research (no user data passed in)
Amazon Associates and other affiliate networks — affiliate tracking

Each of these third parties has its own privacy policy governing their handling of data. We select vendors with reasonable privacy and security practices, but we are not responsible for their independent data handling.

6. How Long We Keep It

Account data: As long as your account is active. Ask us to delete it any time.
Comments: Remain published unless you ask us to remove them or we remove them under our moderation policy.
Newsletter email: Until you unsubscribe.
Analytics: Kept in aggregate. We do not retain individual session data long-term.
Support correspondence: Retained as long as necessary to resolve your request and as required by law.

7. Data Disposal

When personal data is no longer needed and we have no legal obligation to retain it, we dispose of it securely. For digital records, this means deletion from our database and any backups within a reasonable period. We do not retain personal data beyond what is necessary for the purposes described in this policy, consistent with the Illinois Personal Information Protection Act (815 ILCS 530).

8. Security

We implement and maintain reasonable security measures to protect personal information against unauthorized access, use, modification, and disclosure. These include HTTPS everywhere, hashed passwords, and row-level security on our database. No system on the internet is 100% secure. We do our best and address any vulnerabilities we find promptly.

9. Data Breach Notification

If we discover a security breach that compromises your personal information, we will notify you and, where required, the Illinois Attorney General, consistent with the Illinois Personal Information Protection Act (815 ILCS 530/10 et seq.). For purposes of this policy, "personal information" means your first name or first initial and last name combined with any of the following when not encrypted:

Social Security number
Driver's license or state ID number
Financial account number with access credentials
Medical or health insurance information
Username and password that would permit access to an account

We will notify affected individuals without unreasonable delay, and no later than is required by applicable law. If a breach affects more than 500 Illinois residents, we will notify the Illinois Attorney General within the timeframe required by law. Notification will be sent to the email address associated with your account.

10. Kids

This site is not directed to children under 13. We do not knowingly collect personal information from anyone under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected data from a child under 13, email us immediately and we will delete it.

11. Email Communications (CAN-SPAM)

If you subscribe to our newsletter or request updates, we will send you commercial emails in compliance with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). Each commercial email we send includes:

A clear subject line that accurately describes the content
Our physical mailing address
A clear and conspicuous unsubscribe link

You can unsubscribe at any time using the link in any email we send, or by emailing hello@bossdaddylife.com. We will process your opt-out promptly.

12. Your Rights

Depending on where you live — GDPR in the EU/UK, CCPA in California, Illinois PIPA, and similar laws — you have rights over your data:

See it: Ask for a copy of what we hold on you.
Fix it: Ask us to correct anything wrong.
Delete it: Ask us to erase your data.
Take it: Ask for your data in a portable format.
Object to it: Tell us to stop certain kinds of processing.
Opt out of sale: We don't sell data, so you're already covered.

For EU/UK users, the legal bases we rely on are: contract (to run your account), legitimate interests (to operate and improve the site), consent (for newsletter and non-essential cookies — you can withdraw any time), and legal obligation (where the law requires it).

To exercise any of these rights, email hello@bossdaddylife.com. We will respond within 30 days.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Illinois, including the Illinois Personal Information Protection Act (815 ILCS 530) and the Illinois Consumer Fraud and Deceptive Business Practices Act (815 ILCS 505). To the extent federal privacy law applies, we comply with that as well.

14. Changes to This Policy

We may update this page over time. When we do, the "Last updated" date changes. For material changes, we will make reasonable efforts to notify you by email or a notice on the Site before the changes take effect. Continued use of the site after an update means you accept the revised policy.

15. Contact

Any privacy question, any request — email hello@bossdaddylife.com.

Boss Daddy LLC
State of Illinois
hello@bossdaddylife.com