PRIVACY POLICY

Last updated 6/26/2026

This Privacy Notice for SUPERHERO IN DISGUISE™ (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you visit our website at http://www.superheroindisguise.com, purchase or use our products including the Behavior Plan Builder, or engage with us in other related ways. Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at info@superheroindisguise.com.

1. What Information Do We Collect?

Personal information you disclose to us. We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, when you make a purchase, when you use the Behavior Plan Builder, or otherwise when you contact us. The personal information we collect may include:

• Contact information — names and email addresses (and phone number, if you provide it).

• Payment information — payment-card or account details necessary to process a purchase. All payment data is handled and stored by our payment processors, PayPal and Stripe; we do not store full payment-card numbers. See their privacy notices at https://www.paypal.com/us/legalhub/paypal/privacy-full and https://stripe.com/privacy.

• Behavior Plan information — when you use our Behavior Plan Builder, you voluntarily provide information about a child in your care in order to generate a personalized educational plan. This may include the child’s first name or initials, the child’s age, and free-text descriptions you choose to provide about the child’s behaviors, triggers, what happens during difficult moments, developmental level, learning style, motivators or rewards, and relevant family or home circumstances. You provide this information as the child’s parent or legal guardian.

Sensitive Information. Information you provide about a child’s behavior and development through the Behavior Plan Builder may be considered sensitive personal information under some state privacy laws. We process this information only to generate your requested plan and do not use it for advertising or sell it. Information is not stored in our systems.

Information collected from other sources. We do not purchase or collect personal information about you from third-party data brokers, public databases, or marketing partners.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To deliver and facilitate delivery of services to you, including fulfilling and managing your orders, payments, and any returns.

• To generate your personalized behavior plan. We process the information you submit through the Behavior Plan Builder to create and deliver your plan. This processing includes sending your submitted information to a third-party artificial-intelligence provider that generates the plan on our behalf, and to an automation service that routes the information and delivers the resulting plan to you by email.

• To send you marketing and promotional communications, in accordance with your marketing preferences. You can opt out at any time.

• For security and fraud prevention, and to comply with applicable law.

3. When and With Whom Do We Share Your Personal Information?

We may share information in the following situations:

Service Providers. We share information with third-party vendors and service providers that perform services for us and on our behalf, only to the extent necessary to provide our Services. For the Behavior Plan Builder, these include:

• Anthropic, the maker of Claude, our AI provider, which processes your submitted information to generate your plan;

• Make (operated by Celonis), our automation/workflow platform, which routes information between systems and triggers delivery;

• Google (Gmail), our email delivery provider, which sends your plan to you; and

• Stripe and PayPal, our payment processors, which process payments.

Each of these providers maintains its own privacy practices, which you can review at: Anthropic (https://privacy.claude.com/en/), Make (https://www.make.com/en/privacy-notice), Google (https://policies.google.com/privacy), Stripe (https://stripe.com/privacy), and PayPal (https://www.paypal.com/us/legalhub/paypal/privacy-full).

These providers are authorized to use your information only as necessary to provide services to us.

4. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law (such as tax or accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

Behavior Plan information. The Behavior Plan Builder is designed so that the information you submit about a child is used only to generate your plan and is not stored in a database by us after your plan is delivered.

5. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

6. What Are Your Privacy Rights?

Depending on where you are located, you may have certain rights regarding your personal information, including the right to request access, correction, or deletion. Withdrawing your consent: if we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details below. Opting out of marketing: you can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us. We will still send you service-related messages necessary for the administration and use of your account. If you have questions or comments about your privacy rights, email us at info@superheroindisguise.com.

7. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.

8. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information, and to withdraw consent. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect. In the past twelve (12) months, we have collected the following categories of personal information:

A. Identifiers (name, email, IP, account name)

B. Personal information (California Customer Records statute) — name, contact, financial information

C. Protected classification characteristics (age, date of birth, demographic data)

D. Commercial information (transactions, purchase history, payment information)

K. Inferences / profiles

L. Sensitive personal information

We do not sell or share personal information for cross-context behavioral advertising. You have the right to know whether we are processing your personal data, to access and correct it, to request deletion, to obtain a copy, and to non-discrimination for exercising your rights. To exercise these rights, contact us at info@superheroindisguise.com. We will verify your identity before responding. If we decline a request, you may appeal by emailing the same address, and you may contact your state attorney general. Personal information provided in the Hero Plan™ is deleted once the plan is developed and emailed. No plan information is stored. 

9. Information About Children

Our Services are intended for use by adults aged 18 and older. The Behavior Plan Builder is used by a parent or legal guardian, who voluntarily provides information about a child in their care in order to receive an educational plan. We do not knowingly allow children under 18 to create accounts, make purchases, or submit their own information through our Services. Information a parent or guardian provides about a child is used solely to generate the requested educational plan and is handled as described in this Privacy Notice. If you believe a child has provided us with personal information directly, or you wish to review or delete information you provided about a child, please contact us at info@superheroindisguise.com.

10. Do We Make Updates to This Notice?

Yes. We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this Privacy Notice frequently.

11. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, email us at info@superheroindisguise.com or contact us by post at: SUPERHERO IN DISGUISE™, Galveston, TX 77550, United States.

12. How Can You Review, Update, or Delete the Data We Collect From You?

You have the right to request access to the personal information we collect from you, details about how we have processed it, to correct inaccuracies, or to delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. To request to review, update, or delete your personal information, please contact us at info@superheroindisguise.com.