Privacy Policy

UPSCALEBOOST LLC, a Wyoming limited liability company doing business as My Secret Fantasy ("we," "us," "our," or "Company"), respects your privacy and is committed to protecting your personal information. Given the intimate and sensitive nature of our Services, we take privacy extremely seriously.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mysecretfantasy.com and use our personalized fantasy story Services.

BY USING OUR SERVICES, YOU CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE OUR SERVICES.

Information We Collect

1.1 Personal Information You Provide

Account Information:

• First and last name

• Email address

• Phone number (optional, for SMS notifications)

• Password (encrypted)

• Date of birth (for age verification)

• Billing address

Order and Fantasy Information:

• Fantasy scenario descriptions and details

• Character names and descriptions (including yourself and others in the fantasy)

• Setting, tone, and intensity preferences

• Physical descriptions you provide

• Relationship dynamics and specific scenario requests

• Any other details you submit for story customization

Payment Information:

• Credit/debit card information (processed securely through third-party payment processors)

• Billing address

• Transaction history

Communication Information:

• Messages sent via email or contact forms

• Customer support correspondence

• Revision requests and feedback

• Survey responses and reviews

1.2 Automatically Collected Information

Device and Usage Data:

• IP address

• Browser type and version

• Operating system

• Device type and identifiers

• Pages visited on our website

• Time and date of visits

• Referring websites

• Click patterns and navigation paths

• How you interact with our website

Cookies and Tracking Technologies:

We use cookies, web beacons, pixels, and similar technologies to:

• Remember your preferences and login status

• Understand how you use our website

• Improve user experience and website functionality

• Analyze traffic and usage patterns

• Deliver personalized content and advertisements

• Prevent fraud and improve security

1.3 Information from Third Parties

We may receive information from:

• Payment processors - transaction confirmations and fraud prevention data

• Analytics providers (Google Analytics) - website usage patterns

• Marketing platforms - campaign performance data

• Social media platforms - if you interact with our social media content

How We Use Your Information

2.1 Primary Service Delivery

We use your information to:

• Create your personalized fantasy story based on the details you provide

• Process and deliver your orders

• Communicate with you about your order status

• Request clarification or additional details for your story

• Provide customer support and respond to inquiries

• Process revisions and ensure your satisfaction

• Send order confirmations and delivery notifications

2.2 Payment Processing and Fraud Prevention

• Process payments securely

• Prevent fraudulent transactions

• Verify billing information

• Maintain transaction records for accounting and tax compliance

• Investigate chargebacks or payment disputes

2.3 Marketing and Communications (With Your Consent)

• Send promotional emails about new services, features, or special offers

• Send SMS/text messages about orders and promotions (if opted in)

• Provide personalized recommendations based on previous orders

• Conduct customer satisfaction surveys

• Gather feedback to improve Services

2.4 Legal, Safety, and Business Operations

• Comply with legal obligations and regulations

• Enforce our Terms & Conditions

• Protect against fraudulent, illegal, or harmful activity

• Defend our legal rights and property

• Protect the safety and security of our users and staff

• Conduct business analytics and operational improvements

• Maintain and improve website functionality

2.5 Age Verification

• Verify that users are 18 years of age or older

• Prevent minors from accessing adult content

• Comply with age restriction laws

How We Share Your Information

3.1 We Do NOT Sell Your Personal Information

WE DO NOT AND WILL NEVER SELL, RENT, OR TRADE YOUR PERSONAL INFORMATION, INCLUDING YOUR FANTASY DETAILS, TO THIRD PARTIES FOR THEIR MARKETING PURPOSES.

3.2 Service Providers (Limited Sharing)

We share information with trusted third-party service providers who assist in operating our business:

Payment Processors (Stripe, etc.):

• Payment card information (they never see your fantasy details)

• Billing address and transaction data

• They are PCI-DSS compliant and follow strict security standards

Email Service Providers:

• Email address and name (for delivery of your story and communications)

• Order status information

• They do NOT have access to your fantasy content details

Web Hosting and Cloud Storage:

• Necessary data to host our website and securely store order information

• All data is encrypted at rest and in transit

Analytics Services (Google Analytics, etc.):

• Anonymized usage data and website traffic patterns

• NO personally identifiable information or fantasy details

Customer Support Tools:

• Name, email, and order information for support ticket management

• Support staff sign strict confidentiality agreements

All service providers:

• Are contractually obligated to protect your information

• May only use your information for specified purposes

• Must comply with applicable data protection laws

• Are prohibited from using your data for their own purposes

3.3 Legal Requirements and Protection

We may disclose your information if required by law or if we believe such action is necessary to:

• Comply with legal obligations, court orders, or subpoenas

• Respond to lawful requests from government authorities

• Enforce our Terms & Conditions and protect our rights

• Investigate fraud or illegal activities

• Protect the personal safety of users or the public

• Defend against legal claims

Note: We will challenge overly broad requests and notify you when legally permitted.

3.4 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will:

• Notify you via email and website notice before transfer

• Ensure the new entity continues to honor this Privacy Policy

• Provide options to delete your data if you do not consent to transfer

3.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that does NOT identify you personally, such as:

• General statistics about order volume and story types

• Website traffic and usage trends

• Demographic insights (without personal identifiers)

This data cannot be traced back to you individually.

3.6 With Your Explicit Consent

We may share your information for other purposes with your explicit consent, such as:

• Featuring your testimonial (anonymously or with your permission)

• Participating in case studies or promotional materials (only with your written consent)

Data Security

4.1 Security Measures

We implement robust technical and organizational security measures to protect your sensitive information:

Technical Security:

• SSL/TLS encryption for all data transmission (HTTPS)

• AES-256 encryption for data storage at rest

• Secure, encrypted databases with access controls

• Regular security audits and vulnerability assessments

• Firewall protection and intrusion detection systems

• Automated backup systems with encryption

• Multi-factor authentication for staff access

Operational Security:

• Strict employee confidentiality agreements

• Role-based access controls (staff only access information necessary for their role)

• Regular security training for all employees

• Background checks for employees handling sensitive data

• Secure disposal of data when no longer needed

• Incident response procedures

Payment Security:

• PCI-DSS compliant payment processing

• We do NOT store your full credit card information

• Payment data is tokenized and handled by certified processors

4.2 Data Breach Response

In the unlikely event of a data breach that may affect your personal information:

• We will notify you within 72 hours via email

• We will provide details about what information was affected

• We will explain steps we are taking to address the breach

• We will offer guidance on protective actions you can take

• We will report the breach to appropriate authorities as required by law

4.3 Your Responsibility

You are responsible for:

• Keeping your account password secure and confidential

• Using a strong, unique password

• Logging out of your account on shared devices

• Not sharing your login credentials with others

• Protecting your devices from malware and unauthorized access

• Notifying us immediately if you suspect unauthorized account access

We are not liable for security breaches caused by your failure to protect your credentials or devices.

Data Retention

5.1 How Long We Keep Your Information

We retain your personal information only as long as necessary for the purposes described in this Privacy Policy:

Order and Fantasy Information:

• Active orders: Until delivery and satisfaction confirmation

• Completed orders: 7 years for legal, tax, and accounting compliance

• Story files: Stored securely for 7 years (in case of revision requests or disputes)

• Fantasy details: Retained for the duration above, then securely deleted

Account Information:

• As long as your account remains active

• If inactive for 3+ years, we may delete your account after notice

Marketing Preferences:

• Until you opt out or request deletion

• Opt-out requests are honored immediately

Communication Records:

• Customer support emails: 3 years

• Transactional emails: 7 years for legal compliance

Payment Information:

• Transaction records: 7 years for tax and legal purposes

• Credit card details: NOT stored (handled by payment processors)

Analytics and Usage Data:

• Typically retained for 26 months (Google Analytics default)

5.2 Deletion After Retention Period

When retention periods expire:

• Data is securely and permanently deleted

• Backups containing old data are cycled out and destroyed

• Deletion is done in accordance with data protection best practices

Your Rights and Choices

6.1 Access and Portability

You have the right to:

• Access your personal information - Request a copy of the data we hold about you

• Data portability - Receive your data in a structured, machine-readable format (e.g., PDF, CSV)

To request access, email [email protected] with subject line: "Data Access Request"

6.2 Correction and Update

You have the right to:

• Correct inaccurate information - Update your account details, email address, etc.

• Update your preferences - Change communication preference

You can update most information by contacting us for assistance.

6.3 Deletion ("Right to Be Forgotten")

You have the right to request deletion of your personal information, subject to exceptions:

We will delete your information upon request, EXCEPT:

• Completed transactions (retained for 7 years for legal/tax compliance)

• Information needed for ongoing legal obligations or disputes

• Anonymized data that no longer identifies you

To request deletion:

• Email [email protected] with subject line: "Delete My Data"

• We will confirm your identity before processing deletion

• Deletion will be completed within 30 days

After deletion:

• You will lose access to your account and any undelivered orders

• Previously delivered stories will no longer be accessible via your account

• We cannot recover deleted data

6.4 Marketing Opt-Out

You can opt out of marketing communications at any time:

Email Marketing:

• Click "Unsubscribe" at the bottom of any marketing email

SMS/Text Marketing:

• Reply "STOP" to any marketing text message

• Opt-out is immediate

Important: You CANNOT opt out of transactional emails (order confirmations, delivery notifications, revision communications) as these are necessary for service delivery.

6.5 Cookie Management

You can control cookies through:

Browser Settings:

• Most browsers allow you to refuse cookies or delete existing cookies

• Consult your browser's help documentation for instructions

Cookie Preferences:

• Choose which types of cookies to accept

Note: Disabling cookies may affect website functionality and user experience.

6.6 Do Not Track (DNT)

Currently, we do not respond to "Do Not Track" browser signals, as there is no uniform standard for DNT interpretation. However, you can control tracking through cookie settings and browser privacy features.

6.7 Opt-Out of Sale (Not Applicable)

We do NOT sell your personal information, so there is nothing to opt out of. This right is included for completeness under privacy regulations.

Special Privacy Considerations for Our Services

7.1 Sensitive Nature of Fantasy Content

We understand that the fantasy scenarios you share with us are:

• Extremely private and personal

• Potentially embarrassing if disclosed

• Often involving taboo or unconventional themes

• Not intended for anyone else to see

We treat your fantasy details with the highest level of confidentiality.

7.2 Discretion Measures

Discreet Billing:

• Charges appear as "UPSCALEBOOST LLC" or "UPSCALE" on your statement

• NO mention of "My Secret Fantasy" or descriptive terms

Private Delivery:

• Stories delivered via email or secure download

• Email subject lines are discreet

• No physical mail or packages sent

Confidential Staff:

• Only essential personnel (writer, customer support) access your order

• All staff sign strict Non-Disclosure Agreements (NDAs)

• Staff are trained on privacy and confidentiality

Secure Storage:

• All fantasy details encrypted in our database

• Access logged and monitored

• Regular security audits

7.3 What We Will NEVER Do

We will NEVER:

• Share your fantasy details publicly or with third parties

• Use your real name in any public context related to your order

• Sell or rent your information

• Post your story on any website or platform

• Share screenshots or quotes from your fantasy publicly

• Discuss your order with anyone not directly involved in fulfillment

• Use your fantasy for training AI without anonymization

7.4 Anonymized Use for Business Improvement

We MAY use anonymized, de-identified versions of fantasy scenarios for:

• Internal training of writers (with all identifying details removed)

• Quality control and improvement

• Understanding popular themes (aggregated data only)

All identifying information (names, specific personal details, etc.) is completely removed before any internal use.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

8.1 Right to Know

You have the right to request:

• Categories of personal information we collect

• Specific pieces of personal information we hold about you

• Categories of sources from which information is collected

• Business or commercial purposes for collecting information

• Categories of third parties with whom we share information

8.2 Right to Delete

You can request deletion of your personal information (subject to legal exceptions described in Section 6.3).

8.3 Right to Opt-Out of Sale

You have the right to opt out of the "sale" of your personal information.

We DO NOT sell your personal information, so this right does not apply.

8.4 Right to Correct

You have the right to request correction of inaccurate personal information.

8.5 Right to Limit Use of Sensitive Information

You have the right to limit our use of "sensitive personal information."

Our Use of Sensitive Information:

• We collect sensitive information (fantasy content, sexual preferences) ONLY for providing your requested Services

• We do NOT use sensitive information for marketing or other secondary purposes without consent

8.6 Right to Non-Discrimination

You have the right to not be discriminated against for exercising your CCPA/CPRA rights.

We will NOT:

• Deny Services to you

• Charge different prices

• Provide different quality of service ...based on your exercise of privacy rights.

8.7 Authorized Agent

You may designate an authorized agent to make requests on your behalf. The agent must provide:

• Written authorization from you

• Proof of their identity

• Verification that they are authorized to act on your behalf

8.8 How to Exercise Your Rights

To exercise your California privacy rights:

• Email: [email protected]

• Subject Line: "California Privacy Rights Request"

• Provide: Your name, email, and specific request

• We will verify your identity before processing the request

• Response time: Within 45 days (may extend 45 additional days if needed)

International Data Transfers

9.1 Location of Data Processing

Our Services are operated in the United States. If you are accessing our Services from outside the United States, please be aware that:

• Your information will be transferred to, stored, and processed in the United States

• United States data protection laws may differ from those in your country

• By using our Services, you consent to the transfer of your information to the United States

9.2 European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland:

Legal Basis for Processing:

• Contract Performance: Processing necessary to fulfill your order

• Consent: For marketing communications and optional Services

• Legitimate Interests: For fraud prevention, security, and business operations

• Legal Obligations: For compliance with applicable laws

Your GDPR Rights:

• Right of access, correction, deletion (as described in Section 6)

• Right to restrict or object to processing

• Right to withdraw consent at any time

• Right to lodge a complaint with your local data protection authority

Data Transfers:

• We use Standard Contractual Clauses (SCCs) approved by the European Commission

• We implement additional safeguards to protect your information

9.3 Other International Users

If you are located in other countries with data protection laws, we will comply with applicable legal requirements and respect your rights under those laws. Contact us to learn more about your rights.

Children's Privacy

10.1 Age Restriction

OUR SERVICES ARE STRICTLY FOR ADULTS ONLY. WE DO NOT KNOWINGLY COLLECT PERSONAL INFORMATION FROM INDIVIDUALS UNDER 18 YEARS OF AGE.

By using our Services, you certify that you are 18 years of age or older.

10.2 Parental Notice

If you are a parent or guardian and believe your child under 18 has provided personal information to us:

• Contact us immediately at [email protected]

• Subject Line: "Minor Privacy Concern"

• We will promptly investigate and delete any such information

10.3 Age Verification

We may request age verification at any time through:

• Account registration date of birth

• Credit card verification (cardholders typically 18+)

• Additional verification documents if necessary

Text Message/SMS Terms

11.1 Opt-In and Consent

If you opt into our SMS service, you agree to:

• Receive automated marketing and transactional messages

• Provide a valid mobile phone number

• Standard message and data rates apply (charged by your carrier)

11.2 Message Frequency

• Transactional messages: As needed for order updates

• Marketing messages: Varies (typically 2-4 per month)

11.3 Opt-Out

• Reply "STOP" to any message to unsubscribe immediately

• Reply "HELP" for assistance

• We will confirm your opt-out via text

11.4 Privacy

• We do NOT sell your phone number to third parties

• Your number is used only for our Services

• Carrier and message content may not be encrypted

Third-Party Links and Services

12.1 External Links

Our website may contain links to third-party websites, such as:

• Social media platforms

• Payment processors

• Review sites

We are NOT responsible for:

• The privacy practices of these external sites

• The content or security of third-party websites

• How they collect or use your information

Recommendation: Review the privacy policies of any third-party websites before providing personal information.

12.2 Social Media

If you interact with our social media accounts (Facebook, Instagram, Twitter, etc.):

• Those platforms have their own privacy policies

• Your interactions may be visible to others depending on your settings

• We may collect publicly available information you post

Analytics and Advertising

13.1 Google Analytics

We use Google Analytics to understand how visitors use our website.

Data Collected:

• Pages visited, time on page, bounce rate

• Traffic sources and referral sites

• Device type, browser, and operating system

• Geographic location (city/country level)

Privacy Protections:

• IP anonymization enabled

• No personally identifiable information sent to Google Analytics

• You can opt out using Google Analytics Opt-Out Browser Add-on

Google's Privacy Policy: https://policies.google.com/privacy

13.2 Facebook Pixel

We use Facebook Pixel to:

• Measure advertising effectiveness

• Build Custom Audiences for retargeting

• Optimize ad delivery

• Track conversion events

Data Collected:

• Pages visited, actions taken (e.g., "Add to Cart," "Purchase")

• Device information and browser data

• Pixel cookies for tracking

Privacy Protections:

• No sensitive fantasy content is sent to Facebook

• Only standard e-commerce events are tracked

You can opt out via Facebook Ad Preferences: https://www.facebook.com/ads/preferences/

Facebook's Privacy Policy: https://www.facebook.com/privacy/explanation

13.3 Retargeting and Remarketing

We may use retargeting/remarketing services to show you ads after you leave our website:

How It Works:

• A cookie is placed on your browser when you visit our site

• This cookie allows ad networks to show you our ads on other websites

• Ads are based on pages you visited, NOT your fantasy content

Opt-Out Options:

• Browser cookie settings

• Network Advertising Initiative: http://www.networkadvertising.org/choices/

• Digital Advertising Alliance: http://www.aboutads.info/choices/

13.4 Email Marketing Analytics

We track email marketing performance, including:

• Open rates (whether you opened an email)

• Click rates (links you clicked)

• Device and location information

Purpose: To improve email content and relevance.

Opt-Out: Unsubscribe from marketing emails (see Section 6.4).

Updates to This Privacy Policy

14.1 Changes and Modifications

We may update this Privacy Policy periodically to reflect:

• Changes in our business practices

• New features or Services

• Changes in applicable laws and regulations

• User feedback and privacy best practices

14.2 Notice of Changes

We will notify you of material changes by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date

• Sending an email notification for significant changes

• Displaying a website banner notifying you of updates

14.3 Review and Acceptance

We encourage you to review this Privacy Policy periodically.

Your continued use of our Services after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you do not agree to changes, you must:

• Stop using our Services

• Request deletion of your account and data

Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

UPSCALEBOOST LLC (DBA My Secret Fantasy)

701 Tillery Street, Unit 12-2788, Austin, Texas 78702

Email: [email protected]

Consent and Acknowledgment

BY USING OUR SERVICES, YOU ACKNOWLEDGE AND CONSENT TO:

• The collection and use of your information as described in this Privacy Policy

• The processing of your information in the United States

• Receiving electronic communications from us (with opt-out options available)

• The use of cookies and tracking technologies

• The sensitive and private nature of information you share with us

• Our commitment to protecting your privacy and handling your information with discretion