Privacy Policy

1. Who we are & what this covers

All Things GHL and the Super Tools family are operated by 9264-4079 Québec inc, a corporation registered in the Province of Québec, Canada. Throughout this Policy, 9264-4079 Québec inc is referred to as "Super Tools Group of Companies" (also "Super Tools", "we", "us") — a trade name for the same legal entity. We are the party responsible for the personal information collected through allthingsghl.com and the Super Tools. You can reach us — including our designated Privacy Officer — at supertools00 [at] gmail.com.

This Policy applies to all of the following (collectively, the "Services"):

SuperFunnels AI — AI-generated HighLevel funnels
Super Snapshot AI — export 30+ HighLevel asset types to Excel and JSON
Super Editor — open any public HighLevel page directly in the editor
Super Cloner — clone any public HighLevel funnel or website
Super Ledger AI — white-label client portals and automated ROI reporting (coming soon)
SuperMigrator — HighLevel snapshot & sub-account migration tool (coming soon)
The allthingsghl.com website, content, resources, and forms

2. What we collect

Information you provide

When you fill out a form on the site (for example, signing up for the Power Stack, requesting a Strategy Call, or applying to work with Fer), we collect the information you submit, which may include:

Name
Email address
Phone number (optional, where collected)
Company / agency name and role
Free-text messages or questions you send us

Information from payments

Payments for products linked from the site are processed by Stripe (and, where applicable, HighLevel order forms). We do not store full credit card numbers or CVV codes. We may receive limited information from these processors — such as the last 4 digits of the card, the billing country, transaction amount, and a transaction ID — for accounting and fulfillment purposes. Payment data is governed by the privacy policies of Stripe (stripe.com/privacy) and HighLevel.

Information collected automatically

When you visit the site, we and our hosting provider (Vercel) may automatically collect:

IP address (used transiently for routing, abuse detection, and aggregate analytics — not retained against your identity)
Browser type, language, operating system, and device characteristics
Pages viewed, referring URL, and timestamps

Information from third parties

If you interact with us through Facebook, LinkedIn, Instagram, or other platforms, we may receive public profile information that those platforms make available, subject to their privacy policies.

Account, license & tool data

When you purchase or activate a Super Tool, we collect your email address, license key(s), and the CRM URL(s), workspace, or seats your license is bound to — used to authenticate access and enable use under your plan. We retain only billing metadata (tool, plan, status, renewal date) needed to manage your subscription; we do not store full payment card details.

Each tool accesses only the data needed to deliver its stated function — for example, detecting whether a page is HighLevel-hosted, reading the assets you choose to export or clone, or processing billing data you connect for reconciliation. Browser-extension tools (Super Editor, Super Cloner) perform page detection locally in your browser and request only the permissions required for their stated functionality. We do not sell your data or your clients' CRM records, and we do not use them to build advertising profiles. We may collect limited, aggregated technical data (version, error events, feature-usage counts) to maintain reliability; this is not used to identify you personally.

3. How we use your information

We use the information we collect to:

Deliver the resources, downloads, or communications you request
Process and fulfill purchases of our products
Respond to your inquiries and provide support
Send service-related updates and, with your consent, occasional newsletters or marketing
Improve the site, our products, and our content based on aggregate usage patterns
Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity
Comply with legal obligations and enforce our Terms of Service

4. Legal basis for processing

Where the GDPR applies, we rely on the following legal bases:

Consent — for marketing communications and any non-essential cookies
Contract — to fulfill orders and provide products or services you've requested
Legitimate interests — for operating the site, securing it, and analyzing aggregate usage, balanced against your rights
Legal obligation — to comply with applicable laws, including tax and consumer protection

We do not sell your personal information. We share it only in these limited circumstances:

Service providers — companies that help us operate the site or deliver products, including:
- Stripe — payment processing (privacy policy)
- Vercel — hosting and content delivery (privacy policy)
- HighLevel — CRM and order forms where used (privacy policy)
- Email service providers used to deliver communications you've requested
- Google (Fonts) — typography served via Google Fonts CDN
Affiliate partners — when you click an affiliate link from My Stack or Resources, the destination site sets its own cookies and is governed by its own privacy policy. We may receive aggregated commission reporting that identifies a referral was made.
Legal compliance — when required by law, court order, or to protect the rights, property, or safety of ourselves or others.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will provide notice before personal information is transferred.

6. Cookies & analytics

The site currently uses only the cookies and storage necessary to load fonts (Google Fonts) and the CSS framework (Tailwind CDN). We do not currently run a third-party analytics or advertising tracker on allthingsghl.com itself. If we add analytics in the future, we will update this section and, where required, request your consent before non-essential cookies are set.

The Super Tools (SuperFunnels AI, Super Snapshot AI, Super Editor, Super Cloner, Super Ledger AI, SuperMigrator) use only the cookies and storage necessary to operate the product and, where applicable, maintain a logged-in billing session. We do not use third-party advertising cookies on any Service.

7. Data retention

We keep personal information only as long as needed for the purposes described in this policy, or as required by law. In practice:

Inquiry and form-submission data — kept for up to 24 months after our last interaction, then deleted or anonymized
Transaction and accounting records — kept for the period required by Canadian tax law (currently 6 years)
Marketing subscribers — kept until you unsubscribe, plus a short grace period for suppression lists
Server logs — kept for a rolling 90-day window

8. Security

We take reasonable technical and organizational measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These include HTTPS encryption across the site, trusted hosting infrastructure (Vercel), and limited access to personal information on a need-to-know basis. No internet transmission or storage method is 100% secure; we cannot guarantee absolute security.

9. International transfers

We operate from Canada. Our service providers may store and process personal information in the United States, the European Union, or other countries. When personal information moves across borders, we rely on protections recognized under Québec Law 25, Canadian PIPEDA, and applicable transfer mechanisms under GDPR (such as Standard Contractual Clauses) to ensure your information continues to receive a comparable level of protection.

10. Your rights

Depending on where you live, you may have the right to:

Access — request a copy of the personal information we hold about you
Correct — request that we update inaccurate or incomplete information
Delete — request that we delete your personal information, subject to legal exceptions
Portability — request a copy in a structured, commonly-used format (Québec Law 25 + GDPR)
Withdraw consent — for any processing based on your consent, at any time
Object — to processing based on our legitimate interests, including direct marketing
Lodge a complaint — with a data protection authority (see "Contact & complaints" below)

To exercise any of these rights, email us at supertools00 [at] gmail.com. We may need to verify your identity before acting on the request. We will respond within the timeframes required by applicable law.

11. Children's privacy

The Services are intended for business use by adults — agency operators, founders, and professionals using HighLevel — and are not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Third-party sites

The site links to third-party websites and services (HighLevel, Stripe, our Super Tools at their own domains, affiliate partners, our Facebook community, etc.). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing them with personal information.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page. Material changes will be reflected by updating the Effective date and, where appropriate, by additional notice on the site or by email. Your continued use of the site after changes take effect constitutes acceptance of the revised Policy.

14. Contact & complaints

Questions, requests, or complaints about this Policy or our handling of your information — including requests to exercise your rights — should be directed to our Privacy Officer:

Privacy Officer

9264-4079 Québec inc (Super Tools Group of Companies)

📧 supertools00 [at] gmail.com

📍 Côte-Saint-Luc, QC, Canada

If you are not satisfied with our response, you may also file a complaint with the relevant supervisory authority:

Québec: Commission d'accès à l'information du Québec — cai.gouv.qc.ca
Canada (federal): Office of the Privacy Commissioner of Canada — priv.gc.ca
EU/EEA & UK: your local data protection authority