Privacy Policy | Treasure Resilience

Treasure Resilience Platform
Effective Date: April 24, 2026 | Last Updated: April 24, 2026

1. Introduction

Treasure Resilience Platform ("we," "our," or "us"), operated by Eitan Rauch, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://treasure-resilience.com (the "Website") and engage with our digital products and services.

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Data Controller

Eitan Rauch
Treasure Resilience Platform
Email: [email protected]
Website: https://treasure-resilience.com

3. Information We Collect

3.1 Data You Provide Directly

Name and email address — when you sign up for a free chapter, newsletter, or course
Payment information — collected and processed by our payment processors (Gumroad, LemonSqueezy); we do not store payment card data
Communications — any messages or inquiries you send us

3.2 Data Collected Automatically

We use the Meta Pixel (Facebook Pixel) on our Website to collect:

Page views — which pages you visit and when
Lead events — when you submit a form or sign up for an offer
Standard browser data — IP address, browser type, device type, operating system, referring URL

This data is transmitted to Meta Platforms, Inc. for the purposes described in Section 4.

3.3 Cookies and Tracking Technologies

We use cookies and similar technologies including:

Strictly necessary cookies — required for the Website to function
Analytics cookies — to understand how visitors use the Website (e.g., Google Analytics)
Advertising cookies — Meta Pixel, used for conversion tracking and retargeting

You may manage cookie preferences through your browser settings or our cookie consent banner.

4. How We Use Your Data

We use the data we collect for the following purposes:

Purpose	Legal Basis (GDPR)	CCPA Category
Providing digital products and services	Performance of contract	Commercial information
Sending marketing communications (with consent)	Consent	Identifiers
Conversion tracking via Meta Pixel	Legitimate interest / Consent	Internet activity
Ad targeting and retargeting	Consent	Internet activity
Improving Website experience	Legitimate interest	Internet activity
Complying with legal obligations	Legal obligation	—

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Meta Platforms, Inc. — via Meta Pixel for advertising and conversion tracking. Meta's Privacy Policy
Payment processors (Gumroad, LemonSqueezy) — to process purchases
Email service providers — to send transactional and marketing emails
Analytics providers — Google Analytics for Website performance analysis
Legal authorities — when required by law or to protect our rights

All third-party processors are required to handle your data in accordance with applicable data protection laws and our data processing agreements.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. Where we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law:

Email subscribers: Until you unsubscribe or request deletion
Customer purchase records: 7 years (for tax and legal compliance)
Website analytics data: Up to 26 months
Meta Pixel event data: As governed by Meta's retention policies

8. Your Rights

Under GDPR (EU/EEA Residents)

You have the right to:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure ("Right to be Forgotten") — request deletion of your personal data
Restriction — request that we restrict processing of your data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interest
Withdraw Consent — where processing is based on consent, you may withdraw at any time

Under CCPA (California Residents)

You have the right to:

Know — request disclosure of the personal information we collect, use, disclose, and sell
Delete — request deletion of personal information we hold about you
Opt-Out — opt out of the sale of personal information (we do not sell personal data)
Non-Discrimination — we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at [email protected] or visit our Data Deletion page. We will respond within 30 days (GDPR) or 45 days (CCPA).

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

Our Website and services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date. Your continued use of the Website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or complaints:

Eitan Rauch — Treasure Resilience Platform
Email: [email protected]
Website: https://treasure-resilience.com/data-deletion

If you are located in the EU/EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority (DPA).