Privacy Policy

Last updated: February 4, 2026

1. Who We Are

Fiat Women ("we," "us," or "our") is operated by Fiat Women, based in the United States. We provide guided Catholic meditations for women through our website at fiatwomen.com and our members area.

For any questions about this Privacy Policy, you may contact us at:
Email: hello@fiatwomen.com

2. Information We Collect

Information You Provide

• Account information: Your name, email address, and password when you create an account.
• Payment information: When you purchase a subscription, your payment is processed by Stripe. We do not store your credit card number, bank account number, or other financial account details. Stripe handles this data in accordance with their Privacy Policy.
• Communications: If you email us at hello@fiatwomen.com, we retain the content of your message and your email address to respond to your inquiry.
• Newsletter signup: Your email address if you subscribe to our mailing list.

Information Collected Automatically

• Authentication tokens: We use Supabase for authentication, which stores session tokens in your browser's local storage to keep you signed in. These are functional tokens, not tracking cookies.
• Basic server logs: Our hosting provider (Netlify) may collect standard server log data such as IP address, browser type, and pages visited. This data is used for security and performance purposes only.

Information We Do NOT Collect

• We do not use analytics or tracking cookies.
• We do not use advertising pixels or retargeting tools.
• We do not collect location data.
• We do not track which meditations you listen to or for how long.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Process your subscription payment.
• Provide access to our meditation library.
• Send transactional emails (account confirmation, password reset).
• Send newsletter updates if you opted in (you can unsubscribe at any time).
• Respond to your questions and support requests.
• Maintain the security and functionality of our service.

4. Third-Party Services

We use the following third-party services to operate Fiat Women. Each processes data only as necessary to provide their specific service:

• Stripe — Payment processing. Stripe processes and stores your payment information securely. Stripe Privacy Policy
• Supabase — Authentication and database. Stores your account information (name, email, hashed password). Supabase Privacy Policy
• Netlify — Website hosting. May process basic server log data. Netlify Privacy Policy
• Resend — Transactional and marketing email delivery. Processes your email address and name to send emails on our behalf. Resend Privacy Policy
• ElevenLabs — Voice generation for meditation audio content. Does not receive or process any user data. ElevenLabs Privacy Policy

We do not sell, rent, or share your personal information with any third party for their marketing purposes.

5. Cookies & Local Storage

Fiat Women uses only essential cookies and local storage required for the service to function:

• Supabase authentication tokens — Stored in your browser's local storage to maintain your login session. These are strictly functional and are not used for tracking or advertising.
• Cookie consent preference — We store your acceptance of our cookie notice in local storage so the banner is not shown again.

We do not use any third-party tracking cookies, analytics cookies, or advertising cookies.

6. Data Retention

• Account data: Retained for as long as your account is active. If you cancel your subscription, your account data is retained so you can reactivate, unless you request deletion.
• Payment records: Stripe retains transaction records as required by financial regulations.
• Email communications: Support emails are retained for up to 2 years to provide continuity of service.
• Newsletter subscriptions: Retained until you unsubscribe.

7. Your Rights

You have the following rights regarding your personal data:

• Access: You may request a copy of all personal data we hold about you.
• Correction: You may request correction of inaccurate data.
• Deletion: You may request deletion of your account and all associated data. We will complete deletion within 48 hours of your request.
• Export: You may request a portable copy of your data in a commonly used format.
• Withdraw consent: You may withdraw consent for marketing communications at any time by unsubscribing.

To exercise any of these rights, email us at hello@fiatwomen.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to Know: You have the right to know what personal information we collect, use, and disclose.
• Right to Delete: You have the right to request deletion of your personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. We never have and never will.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You have the right to request correction of inaccurate personal information.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email), commercial information (subscription status), and internet activity (authentication tokens). We have not sold any personal information.

To make a request, email hello@fiatwomen.com. We will verify your identity and respond within 45 days.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on (a) your consent (newsletter), (b) contractual necessity (account and payment processing), and (c) legitimate interests (security, service improvement).
• Right to access, rectify, erase, restrict processing, and data portability.
• Right to object to processing based on legitimate interests.
• Right to lodge a complaint with your local data protection authority.

Data may be transferred to and processed in the United States, where our service providers are located. We rely on standard contractual clauses and our service providers' data protection commitments to safeguard your data during international transfers.

10. Children's Privacy

Fiat Women is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@fiatwomen.com and we will promptly delete such information.

Users between 13 and 18 should have parental or guardian consent before creating an account.

11. Data Security

We implement reasonable technical and organizational measures to protect your personal data:

• Passwords are hashed and never stored in plain text (via Supabase).
• Payment processing is handled by Stripe, a PCI-DSS Level 1 certified provider.
• All data transmission is encrypted via HTTPS/TLS.
• Access to user data is limited to authorized personnel only.

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when this policy was last revised.

Your continued use of Fiat Women after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: