Last updated: February 20, 2026
1. Introduction
Sodasoft LLC, doing business as IntroPlan ("IntroPlan", "we", "us", or "our"), operates the website located at introplan.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, purchase our digital products, access our courses and classroom features, participate in our community, or otherwise interact with our services (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
Our mailing address is: Sodasoft LLC, 30 N Gould St, Sheridan, WY 82801, United States.
2. Scope
This Privacy Policy applies to all information collected through our Website and Services, including but not limited to:
- The introplan.com website and all its pages
- Digital products offered for purchase or download
- Online courses and classroom features
- Community features, including events, RSVPs, and comments
- Email communications, newsletters, and marketing materials
- Contact forms and customer support interactions
- Any other services or features we may offer from time to time
This Privacy Policy does not apply to information collected by third parties, including any third-party websites, services, or applications that may be linked to or accessible through our Services. We encourage you to review the privacy policies of any third-party services you access.
3. Information We Collect
3.1 Information You Provide Directly
We collect information that you voluntarily provide to us when you register for an account, make a purchase, participate in community features, fill out a form, or otherwise contact us. This information may include:
- Account information: Your name, email address, and password. Passwords are stored only as cryptographic hashes and are never stored in plain text.
- Profile information: Avatar image, biography, and any other optional profile details you choose to provide.
- Purchase and payment information: Billing name, billing address, and transaction details. All payment processing is handled securely through Stripe. We never receive, process, or store your credit card number, debit card number, or full payment card details on our servers.
- Contact form submissions: Your name, email address, and the content of any messages you send us through our contact forms.
- Newsletter and email subscriptions: Your email address and subscription preferences when you sign up for our newsletters or marketing communications.
- Classroom and course progress data: Information about your enrollment in courses, lesson completion status, progress tracking, and any responses or submissions you make within our classroom features.
- Community interactions: Information you provide when participating in community features, including event RSVPs, comments, posts, and other user-generated content.
3.2 Information Collected Automatically
When you access or use our Services, we automatically collect certain information, including:
- Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
- Usage data and analytics: Pages visited, time spent on pages, click patterns, navigation paths, referring URLs, and other interaction data. We use PostHog, a privacy-friendly analytics platform, to collect this information.
- Error and performance logs: We use Sentry to capture error reports and performance data to help us identify and fix issues with our Services. These logs may include technical information about your device, browser, and the actions that led to an error.
- Cookies and similar technologies: We use cookies and similar tracking technologies to collect and store information. See Section 5 (Cookies and Tracking Technologies) for more details.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and maintain our Services: To create and manage your account, deliver purchased products and courses, track your learning progress, and enable community features.
- Process transactions: To process payments, fulfill orders, send purchase confirmations, and manage subscriptions through our payment processor, Stripe.
- Send transactional communications: To send you emails related to your account, purchases, course updates, password resets, and other service-related notifications.
- Marketing communications: To send you newsletters, promotional materials, and other marketing communications, but only if you have opted in to receive them. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
- Improve our Services: To analyze usage patterns, monitor performance, identify errors, and improve the functionality, content, and user experience of our Website and Services.
- Customer support: To respond to your inquiries, provide technical support, and address your requests or concerns.
- Security and fraud prevention: To protect our Services, our users, and the public from fraud, abuse, and unauthorized access, including verifying user identities and detecting suspicious activity.
- Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to enforce our Terms of Service and other agreements.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our Website. The types of cookies we use include:
- Essential cookies: These cookies are strictly necessary for the operation of our Website. They include authentication session cookies that keep you logged in and security cookies that help protect your account. These cookies cannot be disabled without affecting the functionality of our Services.
- Analytics cookies: We use PostHog, a privacy-friendly analytics platform, to understand how visitors interact with our Website. PostHog is designed with privacy in mind and does not engage in cross-site tracking or sell your data to third parties.
- Security cookies: We use Cloudflare Turnstile to protect our forms and Services from bots and automated abuse. Turnstile may set cookies necessary for its operation.
Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies if you prefer. However, if you choose to decline cookies, some parts of our Services may not function properly.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We will never sell your data. We share your information only with third-party service providers who assist us in operating our business and providing our Services. These service providers are contractually obligated to use your information only for the purposes of providing services to us and are required to maintain the confidentiality and security of your data.
Our current service providers include:
- Supabase: Database hosting, authentication, and backend infrastructure.
- Stripe: Secure payment processing. Stripe is PCI DSS Level 1 compliant, the highest level of certification in the payment industry.
- Vercel: Website hosting and deployment.
- PostHog: Privacy-friendly product analytics.
- Sentry: Error monitoring and performance tracking.
- Resend: Transactional email delivery.
- ConvertKit: Email marketing and newsletter management.
- Cloudflare: Security services, bot protection (Turnstile), and content delivery.
We may also disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to:
- Comply with a legal obligation, subpoena, court order, or governmental request
- Protect and defend the rights or property of Sodasoft LLC
- Prevent or investigate possible wrongdoing in connection with our Services
- Protect the personal safety of users of our Services or the public
- Protect against legal liability
7. Third-Party Services and Links
Our Services may contain links to third-party websites, services, or platforms, including but not limited to external course platforms, Stripe checkout pages, and social media platforms. When you click on a link to a third-party website or interact with a third-party service, you are subject to that third party's privacy policy and terms of service.
We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to review the privacy policy of every site you visit or service you use before providing any personal information.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:
- Account data: Retained for as long as your account remains active. If you request account deletion, we will delete or anonymize your account data within 30 days, except as required by law.
- Purchase and transaction records: Retained for a minimum of 7 years to comply with tax, accounting, and legal record-keeping requirements.
- Course progress data: Retained for as long as your account is active and you maintain access to the corresponding course.
- Community content: Posts, comments, and other user-generated content may be retained even after account deletion if removal would disrupt the community experience. Such content will be anonymized.
- Marketing preferences: Your opt-out preferences are retained indefinitely to ensure we continue to honor your unsubscribe requests.
- Analytics and log data: Generally retained for up to 24 months, after which it is aggregated or deleted.
You may request deletion of your personal data at any time by contacting us at hello@introplan.com. We will process your request in accordance with applicable law.
9. Data Security
We take the security of your personal information seriously and implement industry-standard technical and organizational measures to protect it, including:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS/SSL).
- Row-level security (RLS): Our database employs row-level security policies to ensure users can only access data they are authorized to view.
- Secure authentication: Passwords are cryptographically hashed and never stored in plain text. Authentication is managed through Supabase Auth with secure session management.
- PCI compliance: All payment processing is handled by Stripe, which is PCI DSS Level 1 compliant. Payment card information never touches our servers.
- Access controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
- Regular monitoring: We use error monitoring and security tools to detect and respond to potential threats.
While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the security of your account credentials and should not share your password with anyone.
10. Children's Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at hello@introplan.com. If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information as quickly as possible, in compliance with the Children's Online Privacy Protection Act (COPPA).
11. International Users
Our Services are operated from and our data is processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
By using our Services, you consent to the transfer of your information to the United States and acknowledge that your data will be processed in accordance with this Privacy Policy and applicable United States law. If you do not consent to this transfer, you should not use our Services.
12. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to correction: You may request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to deletion: You may request that we delete your personal data, subject to certain legal exceptions (such as record-keeping requirements for financial transactions).
- Right to opt-out of marketing: You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
- Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at hello@introplan.com. We will respond to your request within 30 days, or within the timeframe required by applicable law.
13. California Residents (CCPA/CPRA)
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.
- Right to delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to correct: You have the right to request that we correct inaccurate personal information we maintain about you.
- Right to opt-out of sale or sharing: We do not sell your personal information, nor do we share it for cross-context behavioral advertising purposes. Therefore, there is no need to opt out of such practices.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.
To exercise your rights under the CCPA/CPRA, please contact us at hello@introplan.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email address, IP address), commercial information (purchase history), internet or other electronic network activity information (browsing history, usage data), and account credentials. We collect this information for the business purposes described in Section 4 of this Privacy Policy.
14. EU/EEA Residents (GDPR)
If you are located in the European Union (EU) or European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).
Legal Bases for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: Processing is necessary to perform our contract with you (e.g., to provide Services you have purchased, to manage your account).
- Legitimate interests: Processing is necessary for our legitimate interests (e.g., improving our Services, ensuring security, conducting analytics), provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where you have given us explicit consent to process your data for a specific purpose (e.g., marketing communications). You may withdraw your consent at any time.
- Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject (e.g., tax and accounting requirements).
Your GDPR Rights
In addition to the rights listed in Section 12, you also have the right to:
- Restrict processing: You may request that we restrict the processing of your personal data in certain circumstances.
- Object to processing: You may object to the processing of your personal data based on our legitimate interests.
- Withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
Data Protection Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with your local data protection authority. You may also contact us first at hello@introplan.com and we will endeavor to resolve your concern.
15. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes to this Privacy Policy, we will notify you by:
- Posting the updated Privacy Policy on this page with a revised "Last updated" date
- Sending an email notification to the address associated with your account, if applicable
- Displaying a prominent notice on our Website
Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: hello@introplan.com
- Mailing address: Sodasoft LLC, 30 N Gould St, Sheridan, WY 82801, United States
We will make every effort to respond to your inquiry within 30 days of receipt.