Your card stays with Stripe
You pay on Stripe's own page. Card and bank details never reach our servers.
Acquisition Systems
Privacy policy
What we keep when you apply, click, buy, are on a coach's email list or work with us, why, for how long, and how to have it deleted. Last updated 31 October 2026.
You pay on Stripe's own page. Card and bank details never reach our servers.
We don't sell your details. A coach who runs ads on Facebook or Instagram can have their pages measure those ads, as described below, and you can say no.
A coach's team calls or writes only after you tick the consent box on their page.
Email us and your application is deleted. What we must keep, and why, is below.
Acquisition Systems runs application pages, a commission-only sales team and payments for coaches and creators who sell programs. This policy covers acquisitionsystems.app, apply.acquisitionsystems.app, the application pages and links we run for coaches (including on a coach's own web address), and the emails we send.
When you apply on a coach's page or buy a coach's program, you are dealing with that coach: they are the seller. We run the page, the sales team and the records for them. What a coach does with your details outside this platform is covered by the coach's own policy.
utm_ values) and the coach's link you came through.So the coach's team can contact you about the program you applied for, as you agreed; to check your answers against the coach's criteria; to keep proof that you agreed; and so the coach can see which posts and ads bring applications.
The coach may send you a short series of automatic emails about the program you applied for: a welcome, a reminder to book your call, a note if you miss one. They come in the coach's name — from the coach's own domain when they have set one up, otherwise from ours — and replies go to the coach. They stop when you book, when your application moves on, or when you unsubscribe: every email has an Unsubscribe link, and your mail app's own unsubscribe button works too. An email may show the coach's logo at the top, which your mail app loads from our site; it's the same picture for everyone, so loading it doesn't tell us who opened which email. To see which of these emails get read, the email service we use (Resend) can count when an email is first opened — through a tiny invisible picture in it — and when a link in it is first clicked — its links pass through a tracking address on our domain on their way to the page. An email from the coach's own domain carries our own tiny picture instead, loaded from our site, and only its first opening is counted. We keep only those two times for each email, never where you were or what device you used; your mail app can stop the picture loading by not showing images. We then keep a scrambled fingerprint of your address, never the address itself, so the coach can't email you again even if your other details are later deleted. Automatic texts go only if you agreed to them, only between 9am and 8pm where you are, and never more than three in a day; reply STOP to any of them to end them, and any other reply also stops the automatic ones so a person can answer you.
When the coach's team calls you through the platform, the call shows the coach's business number, never a team member's own. They call only between 9am and 8pm where you are (from noon on Sundays), and no more than three times in a day. If calls are being recorded, you'll hear that the call may be recorded as soon as you answer, before anyone speaks; the recording can be played only by the team member working your application and us, and it's deleted after 90 days. Tell whoever calls you that you don't want calls, and the coach's team won't call you through the platform again: we keep a scrambled fingerprint of your number, never the number itself, so your request lasts even if your other details are later deleted.
Whether your application goes to the sales team for a call is decided automatically, by rules the coach sets on the page's answers. If it doesn't, you're sent to the coach's next page instead, such as their free community. Your application is still kept and the coach can see it. A booking page that asks its questions before showing times works the same way: if your answers don't qualify, you aren't passed to the sales team, and your name, contact details and answers are kept where only the coach and we can see them. If you'd like a person to look at it, email us.
Some coaches run ads on Facebook and Instagram, which belong to Meta. When the coach whose page you're on has asked us to, their pages load Meta's pixel: it sets Meta's cookies (_fbp, and _fbc if you came from one of the coach's ads) and tells Meta you viewed the page. We also tell Meta, from our server, when you apply, book a call, join the coach's webinar or buy from the coach. With each of those goes your email address, phone number, name and country scrambled (hashed) before they leave us, the ids in those cookies, your network address and your browser's name, and, for a purchase, what you paid. Meta uses this to show the coach which of their ads work and to show their ads to people more like those who buy; Meta's own privacy policy covers what it does with it.
In the European Union, the European Economic Area, the United Kingdom and Switzerland we ask first, with a bar at the bottom of the page: nothing is set or sent unless you press Accept. Anywhere, pressing No thanks, or a browser sending the Global Privacy Control signal, means nothing is set or sent about you. We keep those ids, your network address and your browser's name for 90 days after we last saw them, and our record of what we sent Meta for the same time; your yes or no stays with your application. If the coach stops, the ids we kept are deleted.
The application page itself is designed by the coach. It may include things from other companies, such as a video, a booking calendar, or an analytics or advertising tag, which collect information under those companies' own policies. The page you're sent to after applying may also be another company's, such as a booking calendar.
If the coach's page is hosted somewhere else. Some coaches' pages live on their own websites rather than on ours. Such a page's own website may send us a copy of what you type when you sign up — typically your name, email address, phone number and the other fields on its form, the page's campaign tags and your browser's time zone — and we keep it as an application, as above. The page's own website, and the coach's policy, cover what it keeps itself. Because we never see the words such a page asks you to agree to, we record no consent from it: nobody calls or texts you through the platform on the strength of that sign-up alone. The coach's emails reach you as for any application, each with its Unsubscribe link. If you've asked us to delete your details, anything such a page sends us about you afterwards is ignored.
A coach may give us an email list of people who agreed to hear from them — their newsletter's subscribers, say, or past clients — so we can send the coach's emails to it. Whoever uploads a list confirms that everyone on it agreed to get that coach's emails; bought, rented or scraped lists aren't allowed.
Coaches share short links in posts, videos, emails and ads. When you click one, we:
apply.acquisitionsystems.app, or the coach's own web address) so that, if you apply within 30 days, your application shows which of the coach's links you clicked and when.If you don't apply, the record of your clicks holds nothing about who you are and is deleted after 30 days. Clicks from search-engine robots aren't counted.
Payment is taken by Stripe, in the coach's name, into the coach's own Stripe account. You type your card or bank details into Stripe's page, and they never reach our servers. Stripe's privacy policy covers what Stripe does with them.
If you buy on Whop. Some coaches sell on Whop instead: Whop takes the payment on its own pages, in the coach's name, and pays the coach and their team their shares. With the coach's permission we read from Whop your email address, what you bought and its price, the amount and date of the payment, any refund or dispute, Whop's fees and its reference numbers. We use your email address only to match your purchase to your application, so the right person on the coach's team is credited. We never see your card details there either; Whop's privacy policy covers what Whop does with them.
If you pay a coach directly. Stripe also tells us about payments a coach takes on their own Stripe account away from our pages. We compare the buyer's email address and phone number with the coach's applicants and buyers, and the amount with the coach's prices. Only if you're one of them, or the amount is one of their prices, do we keep a record of that payment: its amount, date and Stripe's reference, linked to the record we already have of you (never a new copy of your details), so the coach's agreement with us can be kept. Otherwise nothing about it is kept beyond Stripe's notification, deleted as above.
| Name | Where | What it does | How long |
|---|---|---|---|
__Host-as_session | acquisitionsystems.app, once you sign in | Keeps you signed in | 30 days after you last use it, up to 90 days, or until you sign out |
__Host-as_owner | acquisitionsystems.app, the platform owner only | Keeps the owner's own sign-in while they look at a coach's view | Until they go back, or the view ends |
__Host-as_device | acquisitionsystems.app, once you sign in | Remembers which account signed in on this browser, so after you're signed out one press can email that account a sign-in link. It holds the account's id, not your email, and can't sign anyone in | 180 days from your last visit, or until you press Not you? Forget this device |
as_src | The page's address | Which of the coach's links you came through | 30 days |
as_vid | The page's address | A random code that joins the links you click to your application, if you apply | 30 days |
as_seen | The page's address | Which links this browser clicked today, so a second click isn't counted as a new visitor | 2 days |
as_lead | The page's address, once you apply | Which application is yours, so joining the coach's webinar from this browser shows you attended. A random code for your application, signed so it can't be made up; no name, email or phone is in it | 120 days |
as_visitor (browser storage) | The application page | A random code for your browser, saved with your application | Until you clear your browser's data |
as_src (browser storage) | The application page | The coach's link you came through | 30 days |
as_ads | The page's address, a coach who runs Meta ads only | Your answer to the bar asking about Meta's cookies (EU, EEA, UK and Switzerland), or a No thanks, so you aren't asked again | 180 days |
_fbp, _fbc | The page's address, a coach who runs Meta ads only, once allowed | Meta's own cookies, set by Meta's pixel: an id for your browser, and the id of the coach's ad you clicked | 90 days, renewed on each visit (Meta's setting) |
as_fbclid (browser storage) | The page, a coach who runs Meta ads only, once allowed | The id of the coach's ad you clicked, in case Meta's own cookie is blocked | 90 days |
as_ad | The coach's payment page, a coach who runs Meta ads only | Carries those ids from the coach's page to the payment you make, so the purchase is matched to the ad | 1 day |
Only the last four are about advertising, and only on the pages of a coach who runs ads on Meta, as described under "If the coach advertises on Facebook or Instagram". With Global Privacy Control on in your browser, none of them are set. Tools a coach adds to their own page may set cookies of their own. Otherwise we don't follow you across other websites.
We don't sell your details. We share them for advertising only with Meta, only for a coach who runs ads there, and you can say no.
| Company | What it does for us | Where |
|---|---|---|
| Cloudflare | Hosts the site, our database, the coaches' pages, profile pictures and email logos; keeps our traffic statistics and request logs | United States (the database in eastern North America); each visit passes through the Cloudflare data centre nearest you |
| Stripe | Takes payments for coaches and pays the sales team | United States, and Stripe's other locations |
| Resend | Sends our emails, including the coaches' follow-up emails, and tells us when one bounces, is marked as spam, or a follow-up email is first opened or clicked | United States |
| Backblaze | Keeps our nightly backups, which we encrypt before they leave Cloudflare | Western United States |
| Telnyx | Places the coaches' teams' calls, once switched on, and keeps a call's recording until we delete it | United States |
| Twilio | Sends the coaches' teams' texts, once switched on | United States |
| Apple, Google, Mozilla, Microsoft | Carry phone alerts to the team members who turn them on, encrypted so they can't read them | Their own locations |
| Whop | Takes payments for the coaches who sell there and pays their teams' shares; we only read those sales from it | United States |
| Meta | For a coach who runs ads on Facebook or Instagram: measures those ads (its pixel on the coach's pages, and our reports of applications, calls booked, webinar joins and purchases). Meta decides for itself what it does with them, under its own policy | United States and Ireland (Meta Platforms Ireland in the EU, EEA, UK and Switzerland), and Meta's other locations |
If you're outside the United States, your details are sent to and kept in the United States.
| What | How long |
|---|---|
| Applications, answers, notes and history | Until you ask us to delete them |
| Your place on a coach's email list (your email address and name) | Until you're taken off it, the list is closed, or you ask us to delete your details. After you're taken off or the list is closed, a scrambled fingerprint of the address stays with the list so its Unsubscribe links keep working; asking us to delete your details deletes that too |
| Sales, payments, commissions and payouts | As long as the law requires us to keep accounting records (at least seven years); without your name and email once you've asked us to delete your details |
| The full contents of Stripe's payment notifications | 90 days; then only a record of what happened |
| Sales read from Whop | While the coach's Whop business is linked: deleted when it's unlinked, or 29 days after the coach removes our Whop app; without your email once you've asked us to delete your details |
| Membership terms you agreed to, and the emails we sent you about a purchase | As long as the sale's own record, as proof of what was agreed and sent |
| Clicks on a coach's link that weren't followed by an application | 30 days |
| Scrambled network addresses used to stop floods (for a page hosted elsewhere, a keyed fingerprint of the email address instead) | 2 days for applications; for sign-in links, 30 days after the link expires |
| Sign-in links and sessions | Deleted 30 days after they expire |
| Requests to change your sign-in email | Unfinished ones are deleted 30 days after their links expire; a finished one keeps only the fingerprint of the address you left |
| Your picture | Until you replace or remove it |
| A coach's logo for emails | Until the coach replaces or removes it |
| Traffic statistics (page views and clicks, with country and referring website) | 3 months at Cloudflare; the daily totals per page and link we keep hold nothing about you |
| Request logs at Cloudflare | 7 days |
| Our database's recovery history at Cloudflare | 30 days |
| Encrypted nightly backups at Backblaze | 90 days |
| Emails, at Resend | 30 days |
| A record of the follow-up emails and texts sent to you, and your replies to texts | With the rest of your application, until you ask us to delete it |
| A record of calls with the coach's team (who, when, how long, how it went) | With the rest of your application, until you ask us to delete it |
| Call recordings, when calls are recorded | 90 days, then deleted, at Telnyx too |
| For a coach who runs Meta ads: the ad and browser ids, network address and browser name kept for Meta, and our record of what we sent Meta | 90 days after we last saw them; your yes or no stays with your application |
| Your request to stop a coach's emails, texts or calls (or an address or number that can't be reached) | As a scrambled fingerprint of the address or number, for as long as the platform runs, so the request keeps working |
| Proof of your consent, after you ask to be deleted | 4 years, hidden, then deleted |
Your application, answers, notes, history, labels, calls, the links you clicked and your place on any coach's email list are deleted straight away; within the hour, so are any recordings of your calls (at Telnyx too) and Twilio's records of your texts. Telnyx, which carries the calls, keeps its own record of each call (the numbers, the time, how long) under its own privacy policy: it offers no way for us to delete it. We keep:
Copies in our backups disappear within 90 days, and from our database's recovery history within 30. Emails already sent about you to the sales team stay in their inboxes. Stripe or Whop, and the coach, keep their own records of any payment; ask the coach to delete those. You won't be treated any differently for asking.
In the European Union or the United Kingdom, the law asks us to say why we may use your details: your consent, when you tick the box on an application page, and when you press Accept for Meta's cookies on a coach's page (which also covers what we tell Meta about you); the steps needed for a purchase you make, or to run an account for a coach or member of the sales team; our legitimate interest in keeping the service secure, stopping floods of fake applications and seeing which of a coach's links bring applications; and legal duties, such as keeping accounting records. You may also complain to your local data protection authority.
In California and other US states with privacy laws, you have the rights described under "Your choices". We don't sell personal information. For a coach who runs ads on Meta, what we tell Meta can count as "sharing" for advertising under some of these laws; Global Privacy Control, No thanks on the bar, or an email to us opts you out.
Our service is for adults. We don't knowingly collect details from anyone under 18; if you think we have, email us and we'll delete them.
When we change this policy, we'll update it here and change the date at the top.
Acquisition Systems: acquisitionsystemsco@gmail.com.