Privacy.

Privacy Policy.

How your information is collected, used, protected, and shared when you use RAFES365.

Last updated: 05.01.2026

1. Who We Are

RAFES365 is operated and registered in the United States. We are the controllers of the personal information described in this policy.

Contact: hello@rafes365.com

2. What We Collect

Information you provide directly

When you purchase a Protocol or submit an intake form, we collect your name, email address, billing information processed by Stripe, intake form responses, and any messages you send us.

Information collected automatically

When you visit our website, we may collect IP address, approximate location, device and browser type, pages visited, time on page, referring source, and cookies or similar tracking data.

Information from third parties

We may receive payment confirmations and transaction details from Stripe, advertising attribution data from Meta, and delivery or engagement data from email providers.

3. How We Use Your Information

  • Build your custom Protocol from your intake data.
  • Deliver your private Web App link and supporting materials.
  • Provide the twelve months of support included with your purchase.
  • Process payments through Stripe.
  • Operate and improve our website.
  • Measure marketing and advertising performance.
  • Comply with legal obligations, including tax reporting and lawful requests.

4. Payment Processing

All payments are processed by Stripe, Inc. We do not store your full credit card or banking details on our servers.

We retain transaction records, the last four digits of your payment method, and Stripe customer ID for accounting, tax, and support purposes.

5. Cookies, Tracking, and Advertising

Our website uses cookies and similar technologies for essential functionality, analytics, and marketing measurement. You can control cookies through your browser settings, although disabling certain cookies may affect site functionality.

We use Meta advertising tools, including Meta Pixel and Conversions API, to measure ad effectiveness and understand which ads and pages drive purchases. Data shared with Meta may include event type, event time, and hashed identifiers.

Our website does not currently respond to browser-level Do Not Track signals. We honor the cookie preferences you set on our site where available.

6. Who We Share Your Information With

  • Service providers who help us operate, including Stripe, Resend, Vercel, and Meta.
  • Trusted collaborators who review relevant sections of your Protocol under confidentiality expectations.
  • Legal authorities if required by law, court order, or to protect our legal rights.
  • We do not sell your personal information to anyone.

7. International Data Transfers

RAFES365 is based in the United States. If you access our services from outside the US, your information will be transferred to and processed in the United States. We rely on standard contractual protections where required.

8. How Long We Keep Your Information

  • Intake data and Protocol contents: retained for the duration of your twelve-month support window plus a reasonable archival period afterward.
  • Transaction records: retained as required by US tax and accounting law, typically seven years.
  • Marketing data: retained until you unsubscribe or request deletion.
  • Analytics data: typically retained for 24 months in aggregated form.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, object to processing, request portability, or withdraw consent for certain uses of your information.

To exercise any of these rights, email hello@rafes365.com. We will respond within a reasonable time, generally within 30 days.

10. Children's Privacy

Our services are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, contact hello@rafes365.com and we will delete it promptly.

11. Security

We use appropriate technical and organizational measures to protect your information, including encrypted connections, secure cloud infrastructure, access controls, and trusted service providers. No system is ever 100% secure, but we maintain industry-standard practices and review them regularly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Last updated date at the top and, for material changes, notify clients by email.

13. Contact

For any privacy question or request, email hello@rafes365.com.

Questions? We read every message personally.

Contact RAFES365