Privacy Policy

This Privacy Policy explains how Expert Incubators LLC, a Florida limited liability company doing business as Limitless ("Limitless", "we", "us", "our"), collects, uses, shares, and protects information when you interact with limitlessai.app, any of our subdomains, our pre-built websites, or our outreach email.

Questions? Contact us at [email protected] or 510 S Tangerine Ct., Eagle Lake, FL 33839-3511.

01What We Collect and Why

We do not collect Social Security numbers, government-issued ID numbers, full payment card numbers, or health information.

02How We Use Your Information

• Deliver, maintain, and improve the Limitless website platform and related services
• Process payments and manage your subscription through Stripe
• Send transactional communications: account notifications, delivery updates, receipts, subscription reminders
• Send SMS messages under the Limitless Website & Engagement Notifications program, only with your explicit opt-in consent
• Respond to support requests, inquiries, and complaints
• Comply with legal, regulatory, tax, and financial reporting obligations
• Prevent fraud, abuse, and unauthorized access
• Analyze usage patterns to improve the platform

03Cookies and Analytics

We use cookies and similar tracking technologies for site operation, analytics, and conversion measurement. You can disable cookies in your browser; doing so may limit functionality.

Third-party services we use on the website:

• Google Analytics 4 — aggregate traffic and usage metrics (Google Privacy Policy)
• Microsoft Clarity — heatmaps and session recordings; PII fields are masked (Microsoft Privacy Statement)
• Meta Pixel — conversion measurement and audience targeting on Facebook/Instagram (Meta Privacy Policy)
• Stripe.js — payment processing; card data goes directly to Stripe and is not processed by our servers (Stripe Privacy Policy)

Opt out of interest-based advertising: Network Advertising Initiative · Digital Advertising Alliance.

04Information Sharing

We may share other categories of personal information only in these limited circumstances:

• Service providers — Stripe (payments), Twilio (SMS), Anthropic (AI chat), and hosting/infrastructure providers; each contractually restricted to use data only to deliver our Service
• Legal compliance — when required by law, regulation, court order, subpoena, or valid governmental request
• Business transfers — in connection with a merger, acquisition, or sale of substantially all assets, under appropriate confidentiality protections
• With your consent — for any other purpose with your explicit permission

We do not sell personal information. We do not sell, rent, or trade your personal data to data brokers or third-party marketers.

05SMS Program

If you opt in to the Limitless Website & Engagement Notifications SMS program, the following apply in addition to the rest of this Privacy Policy.

What we collect

• Your mobile phone number
• Date, time, and method of opt-in (web form, keyword reply, or verbal consent)
• Opt-in source (page URL or call reference)
• Message delivery status (sent, delivered, failed) for operational purposes

How we use SMS data

SMS opt-in data is used exclusively to deliver messages under the program you opted into. It is not used for marketing to third parties, not combined with ad-targeting data, and not shared with any third party except Twilio Inc. (our SMS delivery gateway) for the purpose of transmitting your messages.

Retention

SMS opt-in records and consent documentation are retained for a minimum of four years, or as required by applicable carrier requirements, regulations, or legal holds.

Program details and opt-out

Reply STOP to any message to opt out. Reply HELP for assistance. Message & data rates may apply. Approximately 2–6 messages per month. Full program details at limitlessai.app/sms and limitlessai.app/a2p. Carrier disclosure: AT&T, T-Mobile, Verizon, US Cellular, Sprint, and other carriers are not liable for delayed or undelivered messages.

No sharing for marketing

No mobile information (phone numbers, opt-in records, message history) will be shared with third parties or affiliates for marketing or promotional purposes. All other sharing categories exclude text messaging originator opt-in data and consent.

06Your Rights and Choices

All users

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or outdated information.
• Deletion. Request deletion of your personal information, subject to legal retention obligations.
• Opt out of marketing. Unsubscribe from marketing emails at any time using the unsubscribe link in any message.
• SMS opt-out. Reply STOP to any text message at any time.
• Complaint. File a complaint with your applicable data protection authority.

California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Know the categories and specific pieces of personal information collected about you
• Know whether your personal information has been sold or disclosed, and to whom
• Opt out of the sale of personal information (we do not sell — see Do Not Sell)
• Non-discrimination for exercising your rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

To submit a CCPA request: email [email protected] with subject "CCPA Request." We will respond within 45 days. We do not require you to create an account to submit a request.

EU / UK residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have rights under GDPR and UK GDPR including: access, rectification, erasure, restriction of processing, data portability, and objection to processing. Our lawful basis for processing is: contractual necessity (to deliver the Service you subscribed to), legal obligation, and legitimate interests (analytics, fraud prevention). Where processing is based on consent (SMS, marketing email), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

International transfer notice: your data is processed in the United States. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.

To exercise EU/UK rights: email [email protected]. You may also lodge a complaint with your supervisory authority.

07Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Payment card data is handled exclusively by Stripe and is never transmitted to or stored on our servers. No security system is impenetrable; in the event of a breach affecting your rights, we will notify you as required by applicable law.

08Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with legal, regulatory, tax, and financial reporting obligations. Specific retention periods:

• SMS opt-in records: minimum 4 years, or as required by carrier and regulatory requirements
• Active subscriber records: duration of subscription plus 3 years
• Payment records: 7 years for tax compliance
• Support communications: 3 years from last contact
• Analytics data: 26 months (Google Analytics default)

09Children's Privacy

The Service is intended for business owners and operators aged 18 or older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, contact us at [email protected] and we will delete it promptly.

10SMS / Text Messaging — Expanded Disclosures

This section supplements Section 5 with additional disclosures required under The Campaign Registry (TCR) and CTIA guidelines.

• Program name: Limitless Website & Engagement Notifications
• Operated by: Expert Incubators LLC d/b/a Limitless
• Message types: Transactional only — website delivery notifications, account and subscription updates, support follow-up, and sales inquiry follow-up
• Message frequency: Approximately 2–6 messages per month
• Costs: Message & data rates may apply per your wireless plan
• Opt-out: Reply STOP to cancel; one confirmation message will be sent
• Help: Reply HELP or email [email protected]
• Supported carriers: AT&T, T-Mobile, Verizon, US Cellular, Sprint, and other major U.S. carriers
• Carrier liability: Carriers are not liable for delayed or undelivered messages
• No data sharing for marketing: No mobile opt-in data or consent information is shared with third parties for marketing or promotional purposes
• Consent not required to purchase: You are not required to consent to receive SMS as a condition of purchasing any Limitless product or service

11Governing Law

This Privacy Policy is governed by the laws of the State of Florida, without regard to conflict-of-laws principles. Any dispute arising under this Policy is subject to the venue provisions in our Terms of Service (Polk County, Florida).

12Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be announced by email to active subscribers at least 14 days before taking effect. Continued use of the Service after changes constitutes acceptance.

13Contact Us

For privacy questions, rights requests, or complaints: