Privacy Policy

i AM Transformation Trust ("we," "us," or "our") operates the i AM Transformation platform at www.iamtransformation.com. We are a business trust organized under the laws of Alaska. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform, which includes community features, a digital marketplace, messaging, affiliate programs, and related services.

2.1 Information You Give Us

2.2 Information We Do NOT Collect

2.3 Information Collected Automatically

When you use our platform, we automatically collect limited technical information such as your IP address, browser type, device type, operating system, pages visited, and the dates and times of your visits. We use this to keep the platform running smoothly, prevent abuse, and improve your experience.

We use your information for the following purposes and no others:

• Providing the platform — running communities, processing purchases, delivering content, and enabling messaging
• Processing payments — completing transactions, subscriptions, refunds, and affiliate payouts
• Tax compliance — generating required tax documents (1099s, etc.) for affiliates
• Platform safety — preventing fraud, enforcing our Terms of Use, and responding to legal requests
• Communicating with you — sending transaction confirmations, security alerts, and (with your consent) product updates
• Improving the platform — analyzing usage patterns in aggregate to fix bugs and build better features

We share your information with the service providers that help us run the platform (for example payment, email, SMS, analytics, content moderation, video and hosting providers) and in the situations listed below:

4.1 SMS / Text Messaging

If you opt in to text messages, the mobile phone number you provide and your SMS consent are used only to deliver the messages you signed up for (account alerts, phone verification, activation reminders, and community updates). We do not sell, rent, or share your mobile phone number — or your SMS opt-in consent — with any third parties or affiliates for their own marketing or promotional purposes. Message frequency varies (up to approximately 10 messages per month); message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help. See our SMS Terms & Conditions for full details.

We take security seriously. Here is exactly what protects your information today:

5.1 Signatures and Post-Quantum Cryptography

You can check a certificate we issue on our verification page, which confirms that a matching record exists on our platform. We are working toward post-quantum signatures, but we do not currently claim them for any record. Your messages, posts and other stored information are not protected by post-quantum encryption. Connections between your browser and our website may use post-quantum key exchange when your browser supports it; this depends on your browser.

5.2 Encryption in Transit and Encrypted Calls

Everything you send to us, including messages and private posts, is encrypted in transit. Messages and posts are not end-to-end encrypted, so our systems can read them. End-to-end encrypted messaging is under development and is not available yet; we will update this policy before we describe any conversation as end-to-end encrypted. Audio and video calls between web browsers can use end-to-end encryption when both browsers support it, and the call screen shows whether it is active.

5.3 Sensitive Data Vault

Tax identifiers (such as an SSN or TIN) are encrypted by our servers with AES-256-GCM before they are stored.

5.4 Password Protection

Your password is hashed using Argon2id, the algorithm recommended by OWASP (the leading web security authority). We never store your actual password — only a mathematical fingerprint that cannot be reversed.

5.5 Payment Security

All payment card data is processed directly by Stripe, a PCI DSS Level 1 certified payment processor. Your card numbers never pass through or are stored on our servers.

5.6 Storage Encryption and Backups

Our database storage, backups and snapshots are encrypted at rest at the storage level. Individual fields, such as your phone number, email address and message text, are not separately encrypted inside the database, so people with authorized access to our systems can read them for operations, support and safety.

No matter where you live, we provide every user with the following rights:

• Access — Request a copy of all personal data we hold about you
• Correction — Update or fix inaccurate information
• Deletion — Request we delete your account and personal data
• Data Portability — Receive your data in a common, machine-readable format
• Withdraw Consent — Opt out of optional data processing at any time
• Object — Object to specific uses of your data

To exercise any of these rights, email us at legal@iamtransformation.com. We will respond within 30 days (or sooner if required by your local law).

6.1 Additional Rights for EU/EEA/UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data are: performance of our contract with you (providing the platform), your consent (where we ask for it), compliance with legal obligations (tax reporting), and our legitimate interests (platform security and improvement). You also have the right to lodge a complaint with your local data protection authority.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your rights.

6.3 Cookie Choices

We use essential cookies to keep the platform working (like keeping you logged in). You can control non-essential cookies through your browser settings. The platform will continue to function with only essential cookies enabled.

Our servers are located in the United States. If you are accessing the platform from outside the U.S., your data will be transferred to and processed in the United States. We protect international data transfers using encryption, contractual safeguards, and the security measures described in Section 5. For EU/EEA/UK users, we rely on Standard Contractual Clauses approved by the European Commission as a legal basis for these transfers.

Our platform is available to users aged 13 and older. Users under 13 are not permitted to create accounts or use the platform.

Users aged 13 to 17 may access community content and participate in communities, but may not make purchases, sell products, or participate in the affiliate program. These features require users to be at least 18 years old.

We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at legal@iamtransformation.com.

We keep your data only as long as needed:

• Account data — as long as your account is active. When you delete your account, your name and email address are removed right away; content you posted may remain unless you ask us to delete it. Copies can remain in encrypted backups and snapshots until those are deleted.
• Transaction records — 7 years after the transaction (required by tax and financial regulations)
• Tax documents (W-9, 1099, etc.) — 7 years (required by IRS regulations)
• Server logs — 90 days (for security and troubleshooting)
• Private messages — you can delete messages you sent, which removes them from the conversation. Deleted messages and the rest of the conversation stay stored in our systems

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and/or by placing a prominent notice on the platform at least 30 days before the changes take effect. Minor clarifications or formatting changes may be made without notice. The "Effective Date" at the top always reflects the latest version.

If you have questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data:

We aim to respond to all inquiries within 30 days. For urgent security matters, please include "URGENT" in your subject line.