Privacy Policy

Effective date: September 5, 2026

1. Who we are and how to contact us

Autumn Flow is operated by Michele McCoy, an Arkansas sole proprietor. This Privacy Policy explains how Autumn Flow collects, uses, discloses, and retains personal information through its website, online courses, purchases, email communications, and customer support.

Privacy questions and requests may be sent to michele@autumnflow.com.

2. Information we collect

Depending on how you interact with Autumn Flow, we may collect:

  • Identity and contact information: such as your name and email address.

  • Purchase and billing information: such as billing ZIP code, country, billing address when provided, purchase and refund history, transaction amount, date, status, and transaction or invoice identifiers. Autumn Flow does not receive or store your full payment-card number.

  • Course and account information: such as the courses you are enrolled in, access status, lesson progress, quiz activity, login activity, and account settings.

  • Communications: such as support messages, refund requests, survey responses, and other correspondence.

  • Marketing information: such as subscription and consent status, unsubscribe or opt-out status, and information about email opens and link clicks.

  • Technical and usage information: such as IP address, device and browser information, cookies, pages viewed, links clicked, and other platform usage information.

  • Imported records: when existing students are migrated from Teachable, we may import names, email addresses, course enrollment and access records, and documented marketing-consent or opt-out status.

Autumn Flow does not intentionally collect or store plaintext passwords or full payment-card numbers.

3. How we use information

We use personal information to:

  • create and maintain accounts and provide access to purchased courses;

  • process purchases, refunds, and related records;

  • deliver transactional messages about accounts, purchases, access, security, and support;

  • respond to questions, requests, and disputes;

  • send optional marketing communications when you have chosen to receive them;

  • measure email engagement and understand how the website and courses are used;

  • maintain, secure, troubleshoot, and improve the website, courses, and business operations;

  • prevent fraud, misuse, and security incidents;

  • comply with legal, tax, accounting, and recordkeeping obligations; and

  • enforce Autumn Flow’s Terms of Service and protect legal rights.

4. Service providers and other disclosures

Autumn Flow uses service providers to operate the business. These may include:

  • Podia for website, course hosting, customer accounts, course progress, checkout, email, and related platform services;

  • GoDaddy and Microsoft 365 for domain and business email services;

  • the payment processor identified at checkout for payment processing, refunds, fraud prevention, and transaction records; and

  • accounting, legal, security, and other professional providers when reasonably needed.

These providers may process information on Autumn Flow’s behalf or under their own applicable terms and privacy policies.

Autumn Flow may also disclose information when reasonably necessary to comply with law or valid legal process; prevent fraud, abuse, or security threats; protect Autumn Flow, customers, or others; resolve disputes; complete a business transfer or reorganization; or act with your direction or consent.

Autumn Flow does not sell personal information and does not use or disclose personal information for cross-context behavioral advertising.

5. Email communications and marketing choices

Course access, purchase, refund, account, security, and support messages are transactional communications and may be sent when needed to provide the service.

Marketing email is optional. Autumn Flow uses an opt-in process with confirmation where enabled. Buying a course, receiving migrated course access, or having an existing account does not by itself create marketing consent. Documented opt-outs will be preserved during migration.

You may unsubscribe from marketing emails at any time by using the unsubscribe link in the message or by contacting michele@autumnflow.com. Unsubscribing from marketing does not stop essential transactional communications.

Marketing messages may use tracking pixels or tagged links to record opens and link clicks so Autumn Flow can measure engagement.

6. Cookies and browser signals

Autumn Flow and its platform providers may use essential cookies to support login, security, checkout, and core site functions; functional cookies to remember settings and preferences; and analytics or usage technologies built into the platform to understand website and course activity.

You can control many cookies through your browser settings, but disabling essential cookies may prevent parts of the site or course platform from working.

Browsers may offer a “Do Not Track” signal. Because there is not a consistent industry standard for responding to that signal, the site may not respond to it. Autumn Flow does not currently enable separate advertising pixels or custom analytics tools. This policy will be updated before Autumn Flow adds non-essential analytics, advertising, or cross-site tracking.

7. Retention and security

Autumn Flow uses the following general retention schedule:

  • financial, refund, tax-support, and related transaction records are generally kept for seven years;

  • enrollment and the minimum information needed to provide or document course access are kept while access is owed and until related disputes are resolved;

  • resolved support messages are generally kept for three years;

  • marketing consent and unsubscribe or suppression records are kept as needed to honor communication preferences while marketing continues; and

  • Teachable migration working files are generally deleted one year after the cutover and course entitlements are verified, unless needed for an unresolved issue. A durable record of access rights may be retained as long as needed to honor those rights.

Service providers may keep backups, logs, and records under their own retention schedules. Autumn Flow may retain information longer when reasonably necessary for legal obligations, security, fraud prevention, disputes, or enforcement.

Autumn Flow uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. No system or transmission method can be guaranteed completely secure. You are responsible for protecting your password and devices and for notifying Autumn Flow of suspected unauthorized access.

8. Your choices and privacy rights

You may ask Autumn Flow to provide access to or correct personal information maintained directly by Autumn Flow, or to stop marketing communications, by emailing michele@autumnflow.com.

Depending on where you live and whether applicable law covers Autumn Flow, you may have additional rights concerning access, correction, deletion, portability, restriction, objection, or withdrawal of consent. Autumn Flow will honor those rights when applicable law requires it.

Autumn Flow may need to verify your identity before completing a request. A request may also be limited when information must be retained to provide course access, honor prior commitments, keep legally required records, protect security, prevent fraud, resolve disputes, or protect the rights of others.

9. Children’s privacy

Autumn Flow’s services are not directed to children under sixteen, and no person under sixteen may create an account, access, or use the course platform. Autumn Flow does not knowingly collect personal information from a child under sixteen.

A person who is sixteen or seventeen may use Autumn Flow only with the permission and involvement of a parent or legal guardian, and a parent or legal guardian must make or authorize the purchase. This permission or authorization does not allow account or login sharing.

If you believe a child under sixteen provided personal information to Autumn Flow, contact michele@autumnflow.com so the information can be reviewed and deleted when appropriate.

10. United States and international visitors

Autumn Flow is based in the United States and primarily serves a U.S. audience, but the website and courses may be accessible from other locations. Personal information may be processed in the United States and other countries where service providers operate, and privacy protections may differ from those in your location.

Your privacy rights may vary based on your location and whether the relevant law applies to Autumn Flow. Contact Autumn Flow if you have a privacy question or request. Autumn Flow will review this policy and its practices before intentionally targeting customers in a jurisdiction with additional requirements.

11. Changes and contact

Autumn Flow may update this Privacy Policy from time to time. The revised policy will be posted with a new effective date, and additional notice will be provided when required by law or reasonably appropriate.

Questions or requests about this Privacy Policy or Autumn Flow’s privacy practices should be sent to michele@autumnflow.com.