Who operates this site
"Wyron" is the trading name of Level Up Samui Limited Partnership, registration number 0843567001623, registered office 59/34 Moo 5, Ko Samui, Surat Thani 84320, Thailand. Wyron is the data controller for the personal data described here. "You" means the person visiting this site or holding an account on it.
Questions about data, and any request covered by this policy, go to support@wyron-bell.com.
What data is collected
Wyron keeps the data needed to run an account, sell a program, and record training. Nothing beyond that is gathered.
- Account. Your email address, and an optional display name. Authentication runs through Supabase, which holds the login credentials.
- Purchase. A payment is processed by Stripe. The site stores the Stripe payment-intent identifier and a license row that ties the program to your account. Card numbers never reach this site and are never stored by it.
- Training logs. The sessions you complete are saved as structured data tied to your account. Only you can read them, and a deleted log is soft-deleted before it is removed.
- Lead capture. If you request the free preview or a download, the site records the email address, the source, the page that captured it, the country inferred from the connection, and the browser user-agent.
- Email state. For anyone subscribed to an email sequence, the site records verification and unsubscribe timestamps, and any bounce or complaint reported by the mail provider. Each send is logged.
- Error reports. When something breaks, a diagnostic report is sent to Sentry. Personal data is scrubbed before the report leaves the server, session replay is off, and default personal-data collection is disabled.
What the data is used for, and the legal bases
- Running your account, the app, and your license rests on the contract between you and Wyron. Without this data the account cannot function.
- Security, rate limiting, and error monitoring rest on the legitimate interest in keeping the service working and protected from abuse.
- Email sequences rest on your consent, given when you subscribe and withdrawn from any email through its unsubscribe link.
Data is never sold, and it is never used for advertising.
Cookies
The site sets only the essential cookies that keep you signed in through Supabase authentication. There are no analytics cookies and no advertising trackers in this version.
Who processes data
Running the service depends on a short list of providers, each handling one job:
- Supabase: database and authentication.
- Stripe: payment processing.
- Resend: email delivery.
- Vercel: hosting.
- Cloudflare: DNS and content delivery.
- Upstash: rate limiting, which reads the connection IP address transiently without retaining it.
- Sentry: error monitoring.
Some of these providers operate in the United States. Where data leaves your region, the transfer relies on the standard contractual clauses each provider publishes.
How data is protected
Access to the database is controlled by row-level security, so each account reaches only its own data. Connections to the site are encrypted in transit. Payment and email webhooks are checked against a cryptographic signature before anything is processed, and sensitive account actions are written to an audit log.
How long data is kept
Account data, training logs, and email state are kept until you delete the account. After deletion, one record remains: each license keeps a one-way hash of the purchase email in place of the address itself, alongside the Stripe transaction record. This preserves proof of purchase for accounting and legal obligations without keeping your contact details.
Your rights
Under the GDPR and the Thailand Personal Data Protection Act, you can:
- Access the data held about you. Request it at support@wyron-bell.com.
- Delete your account yourself, from the danger zone on your account page. Deletion cascades your profile and training logs, and leaves only the hashed purchase record described above.
- Export a copy of your data. Request it at support@wyron-bell.com. There is no self-service export in this version.
- Correct an inaccurate detail, and object to a use that rests on legitimate interest.
- Withdraw consent for email at any time, through the unsubscribe link carried by every marketing email.
Minors
The site is not directed at anyone under 18, and Wyron does not knowingly collect data from minors.
Changes to this policy
When this policy changes, the date below is updated. Material changes are noted on the site.
Contact
Data questions and rights requests go to support@wyron-bell.com. Replies come within 48 hours on weekdays.