Privacy policy

Privacy policy

Effective September 15, 2026. Applies to sellwhatyoubuilt.com and the email, community and program services run under the name Sell What You Built.

This is written in plain language because I'd rather you read it. Sell What You Built is a small, one-person business run by Madison Brillon in Florida, USA. This page says what information I collect, why, who else touches it, how long I keep it, and what you can ask me to do with it.

1. What I collect, and why

Email address, when you ask for the scorecard

The opt-in form on /score-your-call/ asks for your email address and nothing else. It is collected and stored by Kit (Kit.com, formerly ConvertKit), my email provider. I use it to send you the scorecard and the class, then one class email a week and, occasionally, an invitation to something I'm running. Kit records which emails you open and which links you click; I use link clicks to decide what to send next and I do not use opens as a trigger for anything. If you reply to an email, your reply is stored in my mailbox and I answer it personally.

Every email has a one-click unsubscribe link. Unsubscribing stops all marketing email within two days. I never sell or rent the list.

Application answers, when you apply to the community or the program

The three application questions (your offer, your recent calls, whether you'll post a weekly report and who sent you) are collected by Skool when you apply to the community, or by me by email or on a call when you apply to the program. I use them only to decide whether the paid parts of this business fit you, and to onboard you if they do.

Payment information

I never see your full card number. Community subscriptions are billed by Skool, which uses Stripe. Program deposits and balances are billed by Stripe through a payment link. Stripe and Skool send me your name, email, the amount, the date and the last four digits of the card so I can match payments to members and issue refunds.

Call recordings and transcripts you send me

If you send a recording or transcript of a sales call for scoring, I store it privately (Google Drive), score it, and return the scored sheet to you. I don't share it with anyone unless you give written consent for a specific use. You are responsible for confirming that the other people on the call consented to being recorded; Florida, California and a number of other states require everyone on a call to agree. Before anything is shown to other members or on video, prospect names are removed.

Analytics

This site may use Google Analytics 4 to count visits and see which pages people read. If it is running, it loads only after you accept it in a consent notice; before that, nothing from Google loads. Google Analytics sets cookies and collects your approximate location, device and browser type, and the pages you view. IP addresses are not stored by GA4. I use the reports in aggregate to see what is worth writing about. You can decline the notice, use a browser setting that blocks analytics, or install Google's opt-out add-on.

Embedded videos

Some pages may embed YouTube videos using YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube may still collect data once you press play, under Google's privacy policy.

Server logs

The site is hosted on Cloudflare Pages. Cloudflare records standard request logs (IP address, browser, page requested, time) for security and to keep the site up. I don't use these logs to identify individual visitors.

2. Cookies

This site sets no cookies of its own. Third parties that may set cookies: Google Analytics (only after consent), YouTube (only when you play an embedded video), and Kit (only if the embedded form loads and you submit it). Skool and Stripe set cookies on their own sites when you log in or pay there, under their own policies.

3. Third parties who process your data

I don't share your data with anyone else, and I don't sell it. If a law or a court requires disclosure, I'll comply and tell you if I'm allowed to.

4. How long I keep things

• Email list: until you unsubscribe, then Kit keeps a suppression record so you aren't emailed again.
• Application answers and membership records: while you're a member and for three years after, because subscription-consent laws require me to keep a record of what you agreed to and when.
• Payment records: seven years, for tax.
• Call recordings and transcripts you send: for the length of the community membership or program plus 90 days, unless you've consented to a longer use in writing, or you ask me to delete them sooner.
• Consent forms for testimonials and documentation: for as long as the material is in use and three years after.
• Analytics data: GA4's default of 14 months.

5. Your rights

Wherever you live, you can email me and I'll do these things within 30 days:

• Tell you what personal data I hold about you and send you a copy.
• Correct it.
• Delete it, except records I'm legally required to keep (payments, subscription consent), which I'll tell you about.
• Stop marketing email (or use the unsubscribe link, which is faster).
• Withdraw any consent you gave to be quoted, recorded or documented. I'll stop future use within 10 days; material already published may take longer to remove.

If you're in the EU, UK or a similar jurisdiction (GDPR): my legal bases are your consent (email list, analytics, testimonials), performance of a contract (membership, program, payments) and legitimate interest (security logs, replying to you). You also have the right to data portability, to object to processing, and to complain to your local data protection authority. I don't use automated decision-making that has legal effects on you.

If you're in California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of the sale or sharing of personal information. I don't sell or share personal information for cross-context advertising, and I won't treat you differently for exercising your rights. Because this business is well below the CCPA's thresholds it may not formally apply, but I'll honour the requests anyway.

I don't knowingly collect information from anyone under 18. This site and its services are for adults running a business.

6. Security

The site is served over HTTPS. Data lives with the providers named above, each of which encrypts it in transit and at rest. My own accounts use strong passwords and two-factor authentication. No system is perfectly secure; if I learn of a breach affecting your data, I'll tell you by email without undue delay.

7. Changes

If this policy changes, the effective date at the top changes with it and I'll mention it in the weekly email. I keep dated copies of each version.

8. Contact

Madison Brillon, Sell What You Built
Email: madison@sellwhatyoubuilt.com
Florida, USA.