Privacy Policy
Effective October 27, 2026
This policy explains how The ABA Shelf handles information when you visit the website, contact us, or use an account.
Information we collect
We collect information you provide, including your name, email address, account details, marketing preference, and messages sent through our contact form. When you use subscription checkout or the billing portal, Stripe collects payment details and your billing address to process payments and calculate applicable tax. The ABA Shelf does not store complete card numbers.
Billing and consent records
We receive subscription and payment updates from Stripe and keep records such as Stripe customer and subscription identifiers, the selected plan and price, subscription status, billing and trial dates, trial eligibility and print allowance, and billing events. We also record checkout acceptance, including the terms and refund-policy versions, acceptance time, selected plan, and trial terms. We use these records to provide access, manage billing and support, document consent, and meet accounting and legal obligations.
How we use information
We use information to operate accounts, provide and secure materials, respond to support requests, process subscriptions, prevent abuse, improve the service, and send requested product updates.
Service providers
We use service providers including Stripe for payments, Supabase for authentication and data storage, Vercel for website hosting, Resend for email delivery, Google Analytics for privacy-limited website measurement, OpenAI for ChatGPT Ads conversion measurement, and Meta for Facebook and Instagram conversion measurement where permitted or accepted. They process information under their own privacy and security terms.
Analytics and cookies
For visitors in the United States, we may use privacy-limited measurement without first showing a consent banner. In other regions, or when location cannot be determined, Google Analytics and the ChatGPT Ads Measurement Pixel stay off unless you accept optional cookies. An explicit rejection or an enabled Global Privacy Control signal keeps measurement off. Analytics may measure pages viewed, whether a public-library search returned results, material-preview activity, membership interactions, general device and browser details, approximate location, and the source that brought you to the site. The ChatGPT Ads Measurement Pixel may record that a Stripe-confirmed free trial started and the selected plan, and may use first-party browser identifiers to attribute that event to a ChatGPT ad interaction. Its automatic advanced-matching feature may detect supported customer information on the website, normalize it, and hash it in the browser before including the hash with conversion events; raw customer information is not sent through that feature. Our Pixel code does not manually send names, email addresses, phone numbers, payment details, library search wording, learner information, or clinical records, and trial events are opted out of future user-level personalization. For Google, Advertising storage, advertising user data, Google Signals, and personalized advertising remain disabled. If you make an explicit choice, it is stored in a necessary first-party cookie for up to 180 days. When ChatGPT Ads measurement is enabled, its first-party attribution cookie may last up to 30 days and its browser-reference cookie may last up to 365 days; rejecting measurement removes them.
Meta conversion measurement
When measurement is permitted, we may store a first-party Meta ad-click identifier for up to 90 days and send Stripe-confirmed trial starts and first paid subscriptions to Meta through its Conversions API. Events include their time, a fixed membership-page address, and, for a first payment, currency and membership revenue excluding tax. Matching uses the ad-click or browser identifier when available, browser user agent, and one-way hashes of your account identifier and normalized account email address. The email hash helps Meta match conversions to accounts; hashing does not make this information anonymous. We do not send raw email addresses, names, payment details, library searches, learner information, or clinical records through this integration. When optional measurement is permitted, we also keep limited campaign labels in a first-party cookie for up to 90 days and associate them with checkout and subscription records to measure which campaigns lead to trials and first payments. Rejecting measurement removes that campaign cookie. Conversions are sent by our server even if you close checkout. Rejecting optional measurement removes Meta attribution cookies; when signed in, it also saves an account preference that stops later conversion events. If you are signed out, sign in and turn measurement off to update that account preference before a later payment.
Material and account activity
We keep account, sign-in, print-delivery, allowance-period, and access records to enforce plan limits, prevent duplicate counting, protect licensed materials, troubleshoot service, and document delivery. Print records may include the account, material, time, billing or trial period, an idempotency identifier, and browser user-agent information. Account-security records may include session identifiers and hashed IP-address and browser information. Member print materials are marked with the account email to identify the licensed user; that marking is visible to anyone who sees the printed material.
Retention and security
We retain information for as long as reasonably needed to provide the service, meet legal and accounting obligations, resolve disputes, and enforce agreements. We use access controls, encrypted connections, and other reasonable safeguards, but no online system is completely secure.
Your choices
You may change your analytics preference at any time using Cookie settings in the footer. You may also unsubscribe from marketing messages, update account information, or request access, correction, or deletion of eligible personal information by contacting support. Some records may be retained where required for legal, security, or transaction purposes.
Clinical and children’s information
The ABA Shelf is intended for professionals and is not directed to children. Do not submit learner names, treatment records, protected health information, or other confidential clinical information through the website.
Changes
We may update this policy as the service changes. The revised policy will be posted here with an updated effective date.
Analytics preference
You can accept or reject optional website analytics at any time.
Contact
Privacy questions may be sent to support@theabashelf.com or through our contact page.