Privacy Policy

This policy explains what personal data Highest Timeline Manifestation Academy ("we", "us") collects through highesttimeline.org, why we collect it, who we share it with, and the choices you have. The academy is operated by SuaLabs OÜ, an Estonian company (registry code 17510478), which is the controller of your personal data.

1. What we collect

• Purchases of recorded sessions: your email address, the session you bought, the amount, the date and the payment status. Payment is handled by Stripe. We never see or store your card number.
• Access to sessions: a personal access link tied to your email address, and basic technical logs (such as IP address and time of request) that our server keeps briefly for security and to prevent abuse.
• Email list: your email address when you sign up to be notified about events or news.
• Messages to us: your email address and whatever you write when you contact us.
• Live event registration: details you enter on Calendly when you register for an event. Calendly processes those details under its own policy.

2. How we use your data

• To process your purchase, give you access to what you bought, and send you your access link.
• To resend your links if you lose them, and to give you support.
• To keep records we are required to keep for tax and accounting.
• To send event announcements and news, only if you signed up. You can unsubscribe at any time.
• To protect the site and our content from fraud, abuse and unauthorised sharing.

3. Legal basis (EU and UK visitors)

We rely on performance of a contract (delivering what you bought), legal obligation (accounting and tax records), our legitimate interests (security and preventing misuse), and your consent (the email list). You can withdraw consent at any time.

4. Who we share it with

We only share data with the services that help us run the academy, and only what they need:

• Stripe for payments.
• Resend to deliver our emails, such as your access link.
• Bunny.net to host and stream the session videos.
• Kit to manage the email list.
• Calendly for live event registration.
• Skool for the Highest Timeline community.
• Cloudflare and our hosting provider to deliver and protect the website.
• Google Workspace for our support inbox.

We do not sell your personal data and we do not use it for advertising.

5. International transfers

Some of these providers are based outside your country, including in the United States. Where required, transfers rely on safeguards such as the providers' standard contractual clauses.

6. How long we keep it

Purchase records are kept for as long as tax and accounting law requires. Your access link stays valid for as long as you have access to the session. Email list data is kept until you unsubscribe. Support emails are kept for as long as needed to help you and handle any follow-up.

7. Cookies and similar storage

We do not use advertising or analytics cookies. Your browser stores two small items so the site works the way you expect: your light or dark theme choice, and, on session pages you have opened, your personal access link so you can come back without searching your email. You can clear them in your browser settings at any time. Third-party services we link to (Stripe, Calendly, Skool, YouTube) set their own cookies on their own pages.

8. Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent. To make a request, email magic [at] sualabs [dot] xyz. We will reply within 30 days. You also have the right to complain to your local data protection authority, or to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

9. Security

Access to sessions is protected by personal signed links, encrypted connections and restricted video delivery. No online service is perfectly secure, but we take reasonable steps to protect your data.

10. Children

Our services are intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.

11. Changes

We may update this policy. The date at the top shows when it last changed.

12. Contact

Questions about your data? Write to us:

SuaLabs OÜ
Registry code: 17510478
Registered office: Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia
Contact: magic [at] sualabs [dot] xyz