This Privacy Policy explains how Infinite Guitar ("Infinite Guitar," "we," "us," or "our") collects, uses, shares, and protects personal information when you use infiniteguitar.com, our lessons, forum, emails, and related services (the "Service"), and the choices and rights you have. It is part of our Terms of Service.
The short version. We collect what we need to run your account, deliver lessons, take payments, and improve the Service. We do not sell your personal information. Card payments are handled by our payment processors, and we never see or store your full card number. We use analytics and advertising cookies, described in Section 6. You can ask us to see, correct, export, or delete your information at any time by emailing [email protected].
1. Who We Are
Infinite Guitar is an online guitar lesson service based in Davidson County, Tennessee, United States. For the purposes of the EU and UK General Data Protection Regulation ("GDPR") and similar laws, Infinite Guitar is the controller of the personal information described in this policy. You can reach us about privacy at [email protected].
This policy does not cover third-party websites or services we link to, which have their own privacy policies.
2. Information We Collect
Information you give us
- Account information: your name, email address, username, and password. Passwords are stored only in hashed form.
- Membership and purchase information: the plan you choose, your order and payment history, and the billing details you enter at checkout. Your card details go directly to our payment processor. We receive only limited information back, such as the card brand, the last four digits, and the expiration date.
- Communications: messages you send us by email, the contact form, or support tickets, and any answers you give in surveys or when you cancel, such as your reason for cancelling.
- Content you post: forum posts, comments, and profile information.
- Affiliate information: if you join our affiliate program, the details needed to track referrals and pay commissions, such as your payment email address.
Information we collect automatically
- Device and log information: your IP address, browser and device type, operating system, referring page, the pages you visit, and the date and time of each request.
- Learning activity: the lessons you view, save, and complete, your progress through tutorials and Learning Paths, and your settings in the Service, such as caption and sound preferences.
- Email activity: whether you open our emails and which links you click, along with the approximate location (city and country) of the device that opened the email.
- Cookies and similar technologies: described in Section 6.
Information from others
- Payment processors tell us whether a payment succeeded and give us limited card and fraud-prevention details.
- Affiliates: if you arrive through an affiliate's referral link, we record that referral.
- Security services tell us whether a form was likely sent by a person or a bot.
- Analytics and advertising partners provide reports about how our site and ads perform.
3. How We Use Information and Our Legal Bases
We use personal information only for the purposes below. Where the GDPR or similar laws apply, we rely on the legal basis listed for each purpose.
| Purpose | Legal basis |
|---|---|
| Create and run your account, deliver lessons and downloads, and save your progress and settings | Performing our contract with you |
| Process payments, renewals, plan changes, and refunds, and prevent payment fraud | Performing our contract; our legitimate interest in preventing fraud |
| Send service emails, such as receipts, password resets, and billing notices | Performing our contract; legal obligation |
| Answer your questions and support requests | Performing our contract; our legitimate interest in helping our users |
| Send marketing emails about lessons, practice tips, new content, and membership offers, including emails tailored to your membership level and the lessons you view, save, or complete | Our legitimate interest in telling members about our Service, or your consent where the law requires it |
| Understand how the Service is used and improve it | Our legitimate interest in improving the Service, or your consent where the law requires it for cookies |
| Measure our advertising and show ads to people who have visited our site | Your consent where the law requires it, otherwise our legitimate interest in promoting the Service |
| Keep the Service secure, stop spam and abuse, and enforce our Terms, including against account sharing | Our legitimate interest in protecting the Service and our users |
| Track affiliate referrals and pay commissions | Performing our contract with the affiliate; our legitimate interest in running the program |
| Keep business and tax records, comply with the law, and establish or defend legal claims | Legal obligation; our legitimate interest in protecting our rights |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. How We Share Information
We do not sell your personal information, and we do not share it with third parties for their own direct marketing. We share it only as described below.
Service providers. We use companies that process personal information on our behalf, under contracts that limit how they may use it:
- DigitalOcean and Laravel Forge: hosting and managing the servers that run the Service.
- Cloudflare: content delivery, security, and Turnstile, which checks that forms are sent by people and not bots. See Cloudflare's Turnstile Privacy Addendum.
- Amazon Web Services: storing and delivering lesson videos and files, and delivering our emails.
- Stripe: card and other payment processing. See Stripe's privacy policy.
- PayPal: payment processing for memberships billed through PayPal.
- Microsoft: our business email, including the support inbox.
- Google: Google Tag Manager and Google Analytics for site analytics, and Google Fonts for typefaces (your browser connects to Google's servers to load them).
Pay-over-time providers. If you choose Affirm or Klarna at checkout, the information needed to apply and pay is sent to that provider, which uses it under its own privacy policy, including to decide whether to extend credit.
Advertising partners. We use the Google Ads remarketing tag on our site and the Meta (Facebook) Pixel on some landing pages. These tools collect information about your visit, such as the pages you view, and the advertising company may combine it with other information it has about you to show you ads and measure their results. Under some U.S. state laws, this may be considered "sharing" personal information for targeted or cross-context behavioral advertising. You can opt out as described in Section 6.
Embedded content. Some pages include content from other services, such as YouTube videos, and the lesson player can load Google's casting software so you can play lessons on a TV. These services may collect information about your visit under their own privacy policies.
Affiliates. If you buy a membership after arriving through an affiliate's referral link, that affiliate can see your name, the order number and date, and the order total, so they can confirm their commission.
Instructors. Instructors can see statistics about their own lessons, such as view counts. They do not see your payment information.
Other users and the public. Your username, forum posts, comments, and public profile information can be seen by other users and may be visible to the public.
Legal and safety reasons. We may disclose information if we believe in good faith that it is required by law, subpoena, or other legal process, or that it is needed to protect the rights, property, or safety of Infinite Guitar, our users, or others, including to prevent fraud.
Business changes. If we reorganize, including by forming a new company to own the Service, or if we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. This policy will continue to apply to it.
With your consent. We may share information for any other purpose you agree to.
5. Emails
When you create an account, we send service emails about your account and membership, and we may send marketing emails. Marketing emails can be tailored to your membership level and to the lessons you view, save, or complete, and we track email opens and clicks to understand what is useful. Every marketing email includes an unsubscribe link, and you can opt out at any time. Unsubscribing does not stop service emails, such as receipts, password resets, and billing notices. We keep your email address on a suppression list after you unsubscribe so that we remember not to email you.
6. Cookies and Similar Technologies
Cookies are small files stored by your browser. We also use your browser's local storage to remember a few settings. Some of these technologies are essential to the Service, and others are used for analytics and advertising. The main ones are:
| Name | Set by | Purpose | How long |
|---|---|---|---|
| wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie, wp_lang | Infinite Guitar | Essential. Keep you signed in and secure your session. | Session, or up to 14 days if you choose to stay signed in |
| pmpro_visit | Infinite Guitar | Essential. Supports the membership and checkout system. | Session |
| ig_plan_intent | Infinite Guitar | Remembers the plan you picked so we can bring you back to it. | 1 day |
| igMediaSound, ig_captions (local storage) | Infinite Guitar | Remember your player sound and caption settings. | Until you clear them |
| signup_first_name, signup_last_name (local storage) | Infinite Guitar | Carry your name from the sign-up form to checkout. | Until you clear them |
| mailster | Infinite Guitar (email system) | Recognizes you when you open your email preferences or unsubscribe page. | 1 hour |
| comment_author_* | Infinite Guitar | Remembers your name and email if you comment without signing in. | 1 year |
| __cf_bm | Cloudflare | Essential. Security and bot protection. | 30 minutes |
| __stripe_mid, __stripe_sid | Stripe | Essential on checkout pages. Fraud prevention. | 1 year and 30 minutes |
| affwp_ref, affwp_ref_visit_id, affwp_campaign | Infinite Guitar (affiliate program) | Record which affiliate referred you, so they can be credited. | 180 days |
| _ga, _ga_* | Google Analytics | Analytics. Distinguish visitors and measure how the site is used. | Up to 2 years |
| _gcl_au | Google Ads | Advertising. Measure ad results and support remarketing. | 90 days |
| _fbp | Meta (some landing pages only) | Advertising. Measure ad results and support remarketing. | 90 days |
Third parties, such as Google, Meta, PayPal, and YouTube, may also set cookies on their own domains when you interact with their content or services.
Your choices. You can block or delete cookies in your browser settings, although the Service will not work properly without essential cookies. You can opt out of Google Analytics with the Google Analytics opt-out browser add-on, manage Google ad personalization in Google's My Ad Center, manage Meta ads in your Facebook ad preferences, and opt out of interest-based ads from many companies through the Digital Advertising Alliance. You can also email us to opt out of targeted advertising.
Browser signals. We do not currently respond to "Do Not Track" or Global Privacy Control browser signals. Use the choices above to opt out.
7. How Long We Keep Information
- Account and learning activity: for as long as your account exists. If you ask us to delete your account, we delete or anonymize this information within 30 days.
- Orders and payment records: for 7 years after the transaction, to meet tax and accounting requirements and to handle disputes.
- Support communications: for as long as needed to help you and to keep a record of our conversations.
- Forum posts: until you or we remove them. If you delete your account, we may keep your posts with your name removed so that discussions stay readable.
- Marketing email data: until you unsubscribe or your account is deleted, except for the suppression list described in Section 5.
- Server logs and backups: for short periods, then overwritten on a rolling schedule. Deleted information may remain in backups until they are overwritten.
- Analytics data: according to the retention settings of the analytics provider.
We may keep information longer when the law requires it or when it is needed to establish, exercise, or defend legal claims.
8. Security
We protect personal information with measures appropriate to its sensitivity, including encrypted connections (HTTPS), hashed passwords, access restricted to the people who need it, and payment processors that meet the Payment Card Industry Data Security Standard. No system is perfectly secure, and we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as the law requires.
9. International Users and Data Transfers
We are based in the United States, and our servers and most of our service providers are located there. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you live. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on an adequacy decision, such as the EU-U.S. Data Privacy Framework for providers certified under it, or on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
10. Your Rights and Choices
For everyone. Whatever the law where you live requires, we will let you:
- access the personal information we hold about you and get a copy of it in a portable format;
- correct information that is wrong or incomplete (you can update most account details yourself on your account page);
- delete your account and personal information, subject to the records we must keep under Section 7;
- opt out of marketing emails and of targeted advertising; and
- withdraw any consent you have given, without affecting processing that took place before.
EEA, UK, and Swiss residents. You also have the right to object to processing based on our legitimate interests, to ask us to restrict processing, and to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.
U.S. state residents. Residents of California, Colorado, Connecticut, Tennessee, Texas, Virginia, and other states with consumer privacy laws may have rights to know, access, correct, delete, and port personal information, and to opt out of the sale or sharing of personal information, targeted advertising, and profiling. We honor these requests from residents of every state.
How to make a request. Email [email protected] from the address on your account and tell us what you would like. We may need to confirm your identity before we act on a request. You may use an authorized agent, and we may ask the agent for proof that you authorized them. We respond within 30 days and will tell you if we need more time where the law allows it. We will not discriminate against you for exercising your rights.
Appeals. If we decline your request, you may appeal by replying to our decision with the word "Appeal." We will respond to your appeal within 45 days. If we deny your appeal, you may contact the attorney general of your state.
11. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users between 13 and 18 may use the Service only with the permission of a parent or guardian, as our Terms of Service explain. If you believe a child under 13 has given us personal information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time. If we make a material change, we will notify members by email or by a notice on the Service before the change takes effect. The "last updated" date at the top of this page shows when it was last changed.
13. Contact Us
Questions, requests, and complaints about privacy can be sent to [email protected].