Data protection
Privacy Policy
1. Data Controller
The data controller is Ghosty Consulting LLC, registered at 1940 Broadway, Suite 314C, Boulder, CO 80302, United States. Contact: hello@machinerychain.com
2. Data We Collect
We collect the following categories of personal data:
- Identity data: name, username
- Contact data: email address, billing address
- Transaction data: payment details, purchase history
- Technical data: IP address, browser type, device information
- Usage data: pages visited, time spent, course progress
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: to fulfill our service agreement with you
- Legitimate interests: to improve our services and prevent fraud
- Legal obligation: to comply with tax and accounting requirements
- Consent: for marketing communications and non-essential cookies
4. How We Use Your Data
Your personal data is used for the following purposes:
- Account creation and authentication
- Processing payments and delivering courses
- Customer support and communication
- Service improvement and analytics
- Legal compliance and fraud prevention
- Marketing communications (with your consent)
5. Data Sharing
We do not sell your personal data. We may share data with trusted service providers (payment processors, hosting providers, analytics services) under strict confidentiality agreements and only for the purposes described in this policy. All providers are vetted for GDPR/CCPA compliance where applicable.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Account data is retained for the duration of your active account plus 3 years for legal and tax purposes. You may request deletion at any time.
7. Your Rights
Depending on your jurisdiction, you have the following rights:
- Access: request a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data ("right to be forgotten")
- Restriction: limit how we process your data
- Portability: receive your data in a structured format
- Objection: object to certain types of processing
- Withdraw consent: at any time for consent-based processing
To exercise any of these rights, contact us at hello@machinerychain.com.
8. Cookies & Tracking
We use cookies and similar technologies for essential functionality, analytics, and user experience improvement. Essential cookies cannot be disabled. Analytics and preference cookies require your consent. You can manage your cookie preferences through your browser settings at any time.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), access controls, and regular security audits. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
10. International Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure adequate protection through standard contractual clauses and by working with providers certified under relevant frameworks.
11. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately at hello@machinerychain.com.
12. Policy Updates
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
13. Contact Us
For questions about this privacy policy or to exercise your rights, contact us at hello@machinerychain.com or by mail at Ghosty Consulting LLC, 1940 Broadway, Suite 314C, Boulder, CO 80302, US.
Last updated: May 22, 2026
For legal mentions, see our Legal Mentions page.