Privacy Policy

Y Not You Media, LLC

Effective Date: August 18, 2026

1. Overview

This Privacy Policy explains what personal information Y Not You Media, LLC, doing business as Y Not You ("Y Not You," "we," "us," or "our"), collects, why we collect it, who we share it with, how long we keep it, and what choices you have.

It applies to www.ynotyoumedia.com and any related sites we operate (the "Site"), to our advisory and project services, and to the paid communities we operate, including The Business Collective. It works alongside our Terms of Service at www.ynotyoumedia.com/terms-of-service.

We are a business-to-business firm. The Site and our services are intended for business users aged 18 and over.

2. Two Different Kinds of Data

This distinction matters, and most privacy policies blur it.

a. Information we hold for ourselves. Information about you as a visitor to our Site, a prospective client, a client contact, or a community member. We decide how and why this information is used. Most of this policy describes it. Where a section covers our own business records about a client relationship, such as the retention schedule in Section 14, it is describing our records, not the client's own data covered by Section 20.

b. Information we process for our clients. When a client engages us, we often work inside their systems and handle information about their customers, leads, and employees. We do not own that information and we do not use it for our own purposes. It is governed by our agreement with that client, not by this policy. Section 20 explains how we handle it. If you are a customer of one of our clients and want to know how your information is used, contact that business directly.

3. Information We Collect

a. Information you give us.

• Contact details such as first and last name, business name, email address, phone number, and role, when you submit a form, request a consultation, subscribe to updates, or email us. Our contact form asks for your name, email, phone number, which services you are interested in, and your message.
• Engagement information such as the goals, challenges, materials, and business context you share with us during a project or advisory relationship.
• Community information such as your profile, posts, comments, and questions inside a community we operate.
• Billing information such as billing name, billing address, and the last four digits and expiry of a payment card. We do not receive or store full payment card numbers. Payments are processed by Stripe and invoicing runs through QuickBooks.
• Application and intake information you provide when applying to or joining a community or program.

b. Information collected automatically.

• Device and connection data such as IP address, browser type, operating system, and device type.
• Usage data such as pages viewed and referring source. Our analytics are page-level and cookieless, so we do not track individual clicks, build a session profile, or infer your location beyond country.
• Limited technical measurement described in Section 6. The Site does not set cookies of its own and does not use advertising or cross-site tracking identifiers.

c. Information from other sources.

• Platform data from services we use to deliver our work, such as engagement and audience metrics from social and advertising platforms.
• Publicly available business information, such as a company website or LinkedIn profile, used to research a prospective client before a call.
• Referrals, when someone introduces you to us.

d. What we do not collect. We do not intentionally collect sensitive personal information such as government identification numbers, financial account credentials, precise geolocation, health information, biometric data, or information about race, religion, sexual orientation, or union membership. Please do not send us this information. If you do, we will delete it from our active systems, except for copies that persist in routine backups or that we are required to keep by law.

4. How We Use Information

We use personal information to:

• Respond to inquiries and provide proposals and consultations.
• Deliver, support, and improve our advisory, project, and community services.
• Operate and administer community memberships, including access, billing, and member communications.
• Send invoices, process payments, and maintain financial and tax records.
• Send newsletters, updates, and marketing communications, with an unsubscribe link in every marketing email.
• Understand how the Site is used and improve it.
• Run and measure our own advertising. That measurement happens inside the ad platforms' own accounts, using data those platforms hold. It does not use tracking placed on our Site. See Sections 6 and 7.
• Promote our firm using work we have produced for clients, together with the client's name and logo, as permitted by Section 17 of our Terms of Service. Recorded calls and sessions are excluded from this and require separate written permission. See Section 10(d).
• Maintain security, prevent fraud and abuse, and protect our rights.
• Meet legal, tax, accounting, and regulatory obligations.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

5. Our Basis for Using Information

We use personal information because you asked us to do something, because we have a legitimate business interest in operating and promoting our firm, because we need to perform a contract with you, because you consented, or because the law requires it. Where we rely on consent, you can withdraw it at any time.

6. Cookies, Tracking, and Analytics

The Site sets no cookies for analytics, advertising, or tracking, and it uses no advertising pixels and no cross-site tracking. There is no Meta Pixel, no LinkedIn Insight Tag, and no Google Analytics on this Site.

Our security and hosting provider may set a strictly necessary cookie on our own domain to distinguish humans from bots or to record that you passed a security check. That cookie does not identify you and is not used for analytics or advertising.

Analytics. We use Cloudflare Web Analytics to understand how many people visit the Site and which pages they read. It is cookieless. It does not fingerprint your device, does not follow you across other websites, and does not build a profile of you.

Hosting and security. The Site is served through Cloudflare, which processes your IP address to deliver pages and to protect the Site against attacks and abuse.

Embedded content from other companies. A few parts of the Site load content from third parties. When that content loads, your browser contacts those companies directly and they receive your IP address. They may set their own cookies in that context, under their own policies rather than ours.

You can control cookies through your browser settings, and most browsers let you block or delete them.

We do not currently operate a cookie consent banner. No United States privacy law requires one for a site like ours, we set no analytics or advertising cookies, and as explained in Section 22 we do not target our services to the European Union or the United Kingdom. If any of that changes, this policy changes with it and we will say so.

7. Advertising

We advertise our own services on platforms such as Meta, LinkedIn, and Google. That advertising is targeted using the audience tools those platforms provide, based on data those platforms already hold, such as job title, industry, or interests.

We do not place tracking pixels on this Site, so we do not build advertising audiences out of your visit here, and we do not retarget you based on the pages you read. Several state privacy laws define "sale," "sharing," and "targeted advertising" broadly enough to capture that kind of pixel activity even when no money changes hands. Because we do not do it, there is nothing of that kind for you to opt out of.

We do not use advertising audiences, custom audiences, or lookalike audiences built from website visitor data.

If we add advertising or analytics tracking to the Site in the future, we will update this policy before doing so and provide a working opt-out at that time.

To control how the ad platforms themselves target you, use their own ad settings, or the industry tools at optout.aboutads.info and optout.networkadvertising.org.

To stop receiving marketing email from us, see Section 12.

8. We Do Not Sell or Share Your Personal Information

We do not sell your personal information, for money or for any other kind of valuable consideration.

We do not rent, trade, or share our email list, contact list, or client list with other companies for their own marketing purposes.

We also do not share your personal information for cross-context behavioral advertising or targeted advertising, as explained in Section 7.

9. Who We Share Information With

Beyond the embedded services described in Section 6, which receive your IP address directly from your browser when their content loads, we share personal information only in these situations:

a. Service providers. Companies that perform functions on our behalf under contract and are not permitted to use your information for their own purposes. These currently include:

Some of these companies also act on their own behalf for their own purposes, not just ours. Stripe handles fraud prevention and regulatory obligations as its own business, and Skool operates your member account under its own privacy policy. For those purposes they are not acting solely as our service provider, and their own policies govern.

b. Our team and subcontractors. Employees and independent contractors who need the information to do the work, bound by confidentiality obligations.

c. Professional advisors. Our accountants, insurers, and attorneys, where needed.

d. Legal and safety. Where required by law, subpoena, or legal process, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Y Not You, our clients, our members, or others.

e. Business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. We will give notice if that happens.

f. With your direction. Where you ask us to share information, for example with a partner or vendor on your account.

10. Call Recording, Session Recording, and AI Meeting Notes

We record certain calls and sessions, and we use AI tools to generate summaries and notes from them. This section explains when and how.

a. Advisory and client calls. We may record advisory sessions, strategy calls, and working sessions, and we use AI tools to produce written summaries, action items, and meeting notes for the client's benefit and for continuity between sessions.

b. Community sessions. Live sessions in our communities, including masterminds, Q&A calls, coaching calls, member networking calls, and guest speaker sessions, are typically recorded and made available to members inside the community.

c. Consent. Recording laws vary by state, and several states require the consent of every participant. We will tell you at or before the start of a call if it is being recorded, and you may decline. If you do not want to be recorded, tell us and we will either stop the recording, or arrange for you to participate without being recorded, or provide notes instead. Joining a community session that has been announced as recorded, after notice, indicates your consent to that recording.

d. What we do with recordings. Advisory recordings and transcripts are used to produce notes and summaries for that engagement. They are not used for our marketing without your written permission. Community session recordings are published inside the community for members, and clips may be used in our marketing only where the session was announced as a recorded and publishable session.

e. Access and deletion. You may ask us to delete a recording or transcript of a call you participated in. We will do so unless we are required to retain it. For community sessions involving multiple participants, we will remove your contributions where technically practical.

f. Retention. See Section 14.

11. Artificial Intelligence

We use AI tools throughout our work, including for research, drafting, analysis, meeting summaries, and the automation systems we build.

Information you provide to us, including material shared in calls and documents, may be processed by the third-party AI providers named in Section 9 in order to deliver our services. We select providers that do not train their models on customer data by default, or we configure the available settings to that effect. We do not use your personal information to train our own models. If a client directs us to use a specific tool whose terms differ, we will say so before we use it.

Deliverables we hand to a client are reviewed by a person before they are delivered. Automation systems we build for clients are a separate case: once handed off, they run on their own and may generate output without a person reviewing each result. Section 15 of our Terms of Service explains how that responsibility is allocated.

We do not use AI to make decisions about you that have legal or similarly significant effects.

If you would prefer that we not process your information using AI tools, tell us before an engagement begins and we will discuss what is possible.

12. Email, Newsletters, and Text Messages

If you subscribe to our updates, join a community, or become a client, we may send you newsletters, educational content, and marketing communications. Every marketing email includes an unsubscribe link, and we honor unsubscribes promptly.

Transactional and service messages, such as invoices, project updates, scheduling, security notices, and membership billing notices, are not marketing and continue even if you unsubscribe from marketing.

If you give us a mobile number and expressly opt in to text messages, we may text you about your engagement, your membership, or scheduling. Message frequency varies. Standard message and data rates apply. Reply STOP to stop messages and HELP for help. We do not sell or share mobile numbers or text-messaging consent with third parties for their marketing. Giving us your phone number on a contact form is not by itself consent to marketing texts.

When you unsubscribe, we retain your email address on a suppression list so that we do not contact you again. That is the purpose of the list and it is why we do not delete it on unsubscribe alone.

13. Community Members

If you join a community we operate, additional handling applies.

• Your profile, posts, and comments are visible to other members of that community. Do not post anything you would not want other members to see.
• Membership billing is administered by the hosting platform and its payment processor. That platform has its own privacy policy that governs its handling of your information.
• Live sessions are typically recorded, as described in Section 10.
• We do not use member posts in our external marketing without your permission.
• When your membership ends, your posts may remain in place so that discussion threads stay coherent for other members. You may ask us to remove or anonymize your contributions and we will do so where technically practical.

14. How Long We Keep Information

This schedule covers our own business records. It does not cover personal data we process on behalf of a client, which is governed by Section 20 and by our agreement with that client, including a return-or-delete obligation that runs within 90 days of the engagement ending.

We keep personal information only as long as we need it, then delete it or anonymize it.

We may keep information longer where a legal obligation, dispute, or investigation requires it.

15. How We Protect Information

We maintain administrative, technical, and organizational safeguards appropriate to the size of our firm and the information we handle. These include encrypted connections to our Site, access controls and least-privilege access where the platform supports it, multi-factor authentication where available, use of reputable vendors, and confidentiality obligations for everyone who works with us.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting personal information we hold for our own purposes, we will notify you as required by law and without undue delay. Where the affected data belongs to a client, we notify that client, and the client notifies the people affected. See Section 20.

16. Your Privacy Choices and Rights

Privacy laws vary by where you live, and not every right below is guaranteed to every person by law. We extend these choices to everyone who contacts us, regardless of where you live, because we think that is the right way to run this.

You may ask us to:

• Know what personal information we hold about you, where we got it, and who we have shared it with.
• Access a copy of that information.
• Correct information that is inaccurate.
• Delete information we hold about you.
• Opt out of marketing communications.
• Opt out of targeted advertising, sale, or sharing, as described in Section 7.
• Withdraw consent you previously gave.
• Object to a particular use, and we will consider it.

We will not discriminate against you, deny you service, charge you a different price, or provide a lower quality of service because you exercised a privacy right.

Some requests have limits. We may need to keep information to complete a transaction, comply with a legal obligation, resolve a dispute, maintain financial records, or honor your own opt-out. Where we cannot fully honor a request, we will tell you why.

17. How to Exercise Your Rights

Email info@ynotyoumedia.com with your request. Tell us what you want and give us enough detail to find your records.

We aim to acknowledge your request within 10 business days and to respond substantively within 45 days. Where a privacy law sets a deadline for your request, we meet that deadline. Where none applies, we handle it as promptly as a firm our size reasonably can, and we will tell you if something will take longer.

We may need to verify your identity before acting on a request about specific records, usually by confirming details you have already given us. An authorized agent may submit a request on your behalf with written authorization.

If you are unhappy with our response, reply and ask us to review it. A partner will take a second look, and where practical it will be someone other than the person who handled it the first time.

18. Global Privacy Control and Do Not Track

Global Privacy Control is a browser signal that tells a website you want to opt out of the sale or sharing of your personal information. We commit to treating it as a valid opt-out request. Today there is nothing for it to switch off, because as explained in Sections 6, 7, and 8 we do not sell or share personal information and we run no advertising trackers on the Site. If we ever add tracking of that kind, honoring this signal is part of what we have committed to build alongside it. Because the signal is tied to a browser, it would not carry over to a different browser or device.

Browsers also send a legacy "Do Not Track" signal. There is still no common standard for how it should be interpreted, and we do not respond to it. Use Global Privacy Control or the options in Section 7 instead.

19. Children and Age

The Site and our services are intended for business users aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not direct any part of our business to children. If you believe a minor has provided us with personal information, email info@ynotyoumedia.com and we will delete it.

20. Client Data We Process on Behalf of Clients

When we deliver services, we frequently work inside a client's systems and handle personal information about that client's customers, leads, subscribers, or employees.

For that information, our client decides why and how it is used, and we act only on that client's instructions. We do not sell it, use it for our own marketing, or use it to train models. The detailed terms, including security, incident notification, and a return-or-delete obligation within 90 days of the engagement ending, live in Section 19 of our Terms of Service and in any data processing agreement we have signed with that client. This section summarizes them so you can see the commitment in one place.

If you are a customer of one of our clients and want to know what information is held about you or want it deleted, contact that business directly. If you contact us instead, we will forward your request to the client and tell you we have done so.

21. Third-Party Sites and Platforms

Our Site, our communities, and our work link to and run on platforms we do not control, including social networks, advertising platforms, Skool, and payment providers. Their handling of your information is governed by their own privacy policies. We encourage you to read them. We are not responsible for their practices.

22. Visitors Outside the United States

We are based in the United States and our systems and service providers are primarily located there. If you access the Site or contact us from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using the Site or contacting us, you understand that.

We do not target our services to the European Union or the United Kingdom. If you are located there and want to exercise rights under the GDPR or UK GDPR, email us and we will handle your request in good faith.

23. Changes to This Policy

We may update this Policy. The current version will always be posted on this page with a new effective date.

If we make a material change to how we use personal information we already hold, we will provide notice by email or a prominent notice on the Site before the change takes effect.

24. Contact Us

Questions, requests, or complaints about privacy:

Y Not You Media, LLC (d/b/a Y Not You)
2 Highland Street, Suite 2
Port Chester, NY 10573

Email: info@ynotyoumedia.com
Web: www.ynotyoumedia.com/contact

This Privacy Policy was last updated on August 18, 2026.