Acquisition Systems

Privacy policy

How we handle your details

What we keep when you apply, click, buy, are on a coach's email list or work with us, why, for how long, and how to have it deleted. Last updated 31 October 2026.

Your card stays with Stripe

You pay on Stripe's own page. Card and bank details never reach our servers.

Never sold

We don't sell your details. A coach who runs ads on Facebook or Instagram can have their pages measure those ads, as described below, and you can say no.

Contact with consent

A coach's team calls or writes only after you tick the consent box on their page.

Deleted when you ask

Email us and your application is deleted. What we must keep, and why, is below.

What happens to an application

in four steps
You applyYour name, email, phone and answers, with the consent line you ticked.
The coach's rules read itAnswers that meet the coach's criteria go to the sales team.
The team contacts youThe coach's sales team sees your application and is emailed your details.
Deleted on requestAll of it goes, except a hidden proof of your consent, kept 4 years.

01Who we are

Acquisition Systems runs application pages, a commission-only sales team and payments for coaches and creators who sell programs. This policy covers acquisitionsystems.app, apply.acquisitionsystems.app, the application pages and links we run for coaches (including on a coach's own web address), and the emails we send.

When you apply on a coach's page or buy a coach's program, you are dealing with that coach: they are the seller. We run the page, the sales team and the records for them. What a coach does with your details outside this platform is covered by the coach's own policy.

02If you apply on a coach's page

What we keep

Why

So the coach's team can contact you about the program you applied for, as you agreed; to check your answers against the coach's criteria; to keep proof that you agreed; and so the coach can see which posts and ads bring applications.

Follow-up emails

The coach may send you a short series of automatic emails about the program you applied for: a welcome, a reminder to book your call, a note if you miss one. They come in the coach's name — from the coach's own domain when they have set one up, otherwise from ours — and replies go to the coach. They stop when you book, when your application moves on, or when you unsubscribe: every email has an Unsubscribe link, and your mail app's own unsubscribe button works too. An email may show the coach's logo at the top, which your mail app loads from our site; it's the same picture for everyone, so loading it doesn't tell us who opened which email. To see which of these emails get read, the email service we use (Resend) can count when an email is first opened — through a tiny invisible picture in it — and when a link in it is first clicked — its links pass through a tracking address on our domain on their way to the page. An email from the coach's own domain carries our own tiny picture instead, loaded from our site, and only its first opening is counted. We keep only those two times for each email, never where you were or what device you used; your mail app can stop the picture loading by not showing images. We then keep a scrambled fingerprint of your address, never the address itself, so the coach can't email you again even if your other details are later deleted. Automatic texts go only if you agreed to them, only between 9am and 8pm where you are, and never more than three in a day; reply STOP to any of them to end them, and any other reply also stops the automatic ones so a person can answer you.

Calls

When the coach's team calls you through the platform, the call shows the coach's business number, never a team member's own. They call only between 9am and 8pm where you are (from noon on Sundays), and no more than three times in a day. If calls are being recorded, you'll hear that the call may be recorded as soon as you answer, before anyone speaks; the recording can be played only by the team member working your application and us, and it's deleted after 90 days. Tell whoever calls you that you don't want calls, and the coach's team won't call you through the platform again: we keep a scrambled fingerprint of your number, never the number itself, so your request lasts even if your other details are later deleted.

An automatic check

Whether your application goes to the sales team for a call is decided automatically, by rules the coach sets on the page's answers. If it doesn't, you're sent to the coach's next page instead, such as their free community. Your application is still kept and the coach can see it. A booking page that asks its questions before showing times works the same way: if your answers don't qualify, you aren't passed to the sales team, and your name, contact details and answers are kept where only the coach and we can see them. If you'd like a person to look at it, email us.

If the coach advertises on Facebook or Instagram

Some coaches run ads on Facebook and Instagram, which belong to Meta. When the coach whose page you're on has asked us to, their pages load Meta's pixel: it sets Meta's cookies (_fbp, and _fbc if you came from one of the coach's ads) and tells Meta you viewed the page. We also tell Meta, from our server, when you apply, book a call, join the coach's webinar or buy from the coach. With each of those goes your email address, phone number, name and country scrambled (hashed) before they leave us, the ids in those cookies, your network address and your browser's name, and, for a purchase, what you paid. Meta uses this to show the coach which of their ads work and to show their ads to people more like those who buy; Meta's own privacy policy covers what it does with it.

In the European Union, the European Economic Area, the United Kingdom and Switzerland we ask first, with a bar at the bottom of the page: nothing is set or sent unless you press Accept. Anywhere, pressing No thanks, or a browser sending the Global Privacy Control signal, means nothing is set or sent about you. We keep those ids, your network address and your browser's name for 90 days after we last saw them, and our record of what we sent Meta for the same time; your yes or no stays with your application. If the coach stops, the ids we kept are deleted.

The application page itself is designed by the coach. It may include things from other companies, such as a video, a booking calendar, or an analytics or advertising tag, which collect information under those companies' own policies. The page you're sent to after applying may also be another company's, such as a booking calendar.

If the coach's page is hosted somewhere else. Some coaches' pages live on their own websites rather than on ours. Such a page's own website may send us a copy of what you type when you sign up — typically your name, email address, phone number and the other fields on its form, the page's campaign tags and your browser's time zone — and we keep it as an application, as above. The page's own website, and the coach's policy, cover what it keeps itself. Because we never see the words such a page asks you to agree to, we record no consent from it: nobody calls or texts you through the platform on the strength of that sign-up alone. The coach's emails reach you as for any application, each with its Unsubscribe link. If you've asked us to delete your details, anything such a page sends us about you afterwards is ignored.

03If you're on a coach's email list

A coach may give us an email list of people who agreed to hear from them — their newsletter's subscribers, say, or past clients — so we can send the coach's emails to it. Whoever uploads a list confirms that everyone on it agreed to get that coach's emails; bought, rented or scraped lists aren't allowed.

Coaches share short links in posts, videos, emails and ads. When you click one, we:

If you don't apply, the record of your clicks holds nothing about who you are and is deleted after 30 days. Clicks from search-engine robots aren't counted.

05If you buy

Payment is taken by Stripe, in the coach's name, into the coach's own Stripe account. You type your card or bank details into Stripe's page, and they never reach our servers. Stripe's privacy policy covers what Stripe does with them.

If you buy on Whop. Some coaches sell on Whop instead: Whop takes the payment on its own pages, in the coach's name, and pays the coach and their team their shares. With the coach's permission we read from Whop your email address, what you bought and its price, the amount and date of the payment, any refund or dispute, Whop's fees and its reference numbers. We use your email address only to match your purchase to your application, so the right person on the coach's team is credited. We never see your card details there either; Whop's privacy policy covers what Whop does with them.

If you pay a coach directly. Stripe also tells us about payments a coach takes on their own Stripe account away from our pages. We compare the buyer's email address and phone number with the coach's applicants and buyers, and the amount with the coach's prices. Only if you're one of them, or the amount is one of their prices, do we keep a record of that payment: its amount, date and Stripe's reference, linked to the record we already have of you (never a new copy of your details), so the coach's agreement with us can be kept. Otherwise nothing about it is kept beyond Stripe's notification, deleted as above.

06If you're a coach or on the sales team

07Cookies and browser storage

NameWhereWhat it doesHow long
__Host-as_sessionacquisitionsystems.app, once you sign inKeeps you signed in30 days after you last use it, up to 90 days, or until you sign out
__Host-as_owneracquisitionsystems.app, the platform owner onlyKeeps the owner's own sign-in while they look at a coach's viewUntil they go back, or the view ends
__Host-as_deviceacquisitionsystems.app, once you sign inRemembers which account signed in on this browser, so after you're signed out one press can email that account a sign-in link. It holds the account's id, not your email, and can't sign anyone in180 days from your last visit, or until you press Not you? Forget this device
as_srcThe page's addressWhich of the coach's links you came through30 days
as_vidThe page's addressA random code that joins the links you click to your application, if you apply30 days
as_seenThe page's addressWhich links this browser clicked today, so a second click isn't counted as a new visitor2 days
as_leadThe page's address, once you applyWhich application is yours, so joining the coach's webinar from this browser shows you attended. A random code for your application, signed so it can't be made up; no name, email or phone is in it120 days
as_visitor (browser storage)The application pageA random code for your browser, saved with your applicationUntil you clear your browser's data
as_src (browser storage)The application pageThe coach's link you came through30 days
as_adsThe page's address, a coach who runs Meta ads onlyYour answer to the bar asking about Meta's cookies (EU, EEA, UK and Switzerland), or a No thanks, so you aren't asked again180 days
_fbp, _fbcThe page's address, a coach who runs Meta ads only, once allowedMeta's own cookies, set by Meta's pixel: an id for your browser, and the id of the coach's ad you clicked90 days, renewed on each visit (Meta's setting)
as_fbclid (browser storage)The page, a coach who runs Meta ads only, once allowedThe id of the coach's ad you clicked, in case Meta's own cookie is blocked90 days
as_adThe coach's payment page, a coach who runs Meta ads onlyCarries those ids from the coach's page to the payment you make, so the purchase is matched to the ad1 day

Only the last four are about advertising, and only on the pages of a coach who runs ads on Meta, as described under "If the coach advertises on Facebook or Instagram". With Global Privacy Control on in your browser, none of them are set. Tools a coach adds to their own page may set cookies of their own. Otherwise we don't follow you across other websites.

08Who sees your details

We don't sell your details. We share them for advertising only with Meta, only for a coach who runs ads there, and you can say no.

09Where your details are kept

CompanyWhat it does for usWhere
CloudflareHosts the site, our database, the coaches' pages, profile pictures and email logos; keeps our traffic statistics and request logsUnited States (the database in eastern North America); each visit passes through the Cloudflare data centre nearest you
StripeTakes payments for coaches and pays the sales teamUnited States, and Stripe's other locations
ResendSends our emails, including the coaches' follow-up emails, and tells us when one bounces, is marked as spam, or a follow-up email is first opened or clickedUnited States
BackblazeKeeps our nightly backups, which we encrypt before they leave CloudflareWestern United States
TelnyxPlaces the coaches' teams' calls, once switched on, and keeps a call's recording until we delete itUnited States
TwilioSends the coaches' teams' texts, once switched onUnited States
Apple, Google, Mozilla, MicrosoftCarry phone alerts to the team members who turn them on, encrypted so they can't read themTheir own locations
WhopTakes payments for the coaches who sell there and pays their teams' shares; we only read those sales from itUnited States
MetaFor a coach who runs ads on Facebook or Instagram: measures those ads (its pixel on the coach's pages, and our reports of applications, calls booked, webinar joins and purchases). Meta decides for itself what it does with them, under its own policyUnited States and Ireland (Meta Platforms Ireland in the EU, EEA, UK and Switzerland), and Meta's other locations

If you're outside the United States, your details are sent to and kept in the United States.

10How long we keep them

WhatHow long
Applications, answers, notes and historyUntil you ask us to delete them
Your place on a coach's email list (your email address and name)Until you're taken off it, the list is closed, or you ask us to delete your details. After you're taken off or the list is closed, a scrambled fingerprint of the address stays with the list so its Unsubscribe links keep working; asking us to delete your details deletes that too
Sales, payments, commissions and payoutsAs long as the law requires us to keep accounting records (at least seven years); without your name and email once you've asked us to delete your details
The full contents of Stripe's payment notifications90 days; then only a record of what happened
Sales read from WhopWhile the coach's Whop business is linked: deleted when it's unlinked, or 29 days after the coach removes our Whop app; without your email once you've asked us to delete your details
Membership terms you agreed to, and the emails we sent you about a purchaseAs long as the sale's own record, as proof of what was agreed and sent
Clicks on a coach's link that weren't followed by an application30 days
Scrambled network addresses used to stop floods (for a page hosted elsewhere, a keyed fingerprint of the email address instead)2 days for applications; for sign-in links, 30 days after the link expires
Sign-in links and sessionsDeleted 30 days after they expire
Requests to change your sign-in emailUnfinished ones are deleted 30 days after their links expire; a finished one keeps only the fingerprint of the address you left
Your pictureUntil you replace or remove it
A coach's logo for emailsUntil the coach replaces or removes it
Traffic statistics (page views and clicks, with country and referring website)3 months at Cloudflare; the daily totals per page and link we keep hold nothing about you
Request logs at Cloudflare7 days
Our database's recovery history at Cloudflare30 days
Encrypted nightly backups at Backblaze90 days
Emails, at Resend30 days
A record of the follow-up emails and texts sent to you, and your replies to textsWith the rest of your application, until you ask us to delete it
A record of calls with the coach's team (who, when, how long, how it went)With the rest of your application, until you ask us to delete it
Call recordings, when calls are recorded90 days, then deleted, at Telnyx too
For a coach who runs Meta ads: the ad and browser ids, network address and browser name kept for Meta, and our record of what we sent Meta90 days after we last saw them; your yes or no stays with your application
Your request to stop a coach's emails, texts or calls (or an address or number that can't be reached)As a scrambled fingerprint of the address or number, for as long as the platform runs, so the request keeps working
Proof of your consent, after you ask to be deleted4 years, hidden, then deleted

11Your choices

What deleting removes, and what it keeps

Your application, answers, notes, history, labels, calls, the links you clicked and your place on any coach's email list are deleted straight away; within the hour, so are any recordings of your calls (at Telnyx too) and Twilio's records of your texts. Telnyx, which carries the calls, keeps its own record of each call (the numbers, the time, how long) under its own privacy policy: it offers no way for us to delete it. We keep:

Copies in our backups disappear within 90 days, and from our database's recovery history within 30. Emails already sent about you to the sales team stay in their inboxes. Stripe or Whop, and the coach, keep their own records of any payment; ask the coach to delete those. You won't be treated any differently for asking.

12How we protect them

13The law where you live

In the European Union or the United Kingdom, the law asks us to say why we may use your details: your consent, when you tick the box on an application page, and when you press Accept for Meta's cookies on a coach's page (which also covers what we tell Meta about you); the steps needed for a purchase you make, or to run an account for a coach or member of the sales team; our legitimate interest in keeping the service secure, stopping floods of fake applications and seeing which of a coach's links bring applications; and legal duties, such as keeping accounting records. You may also complain to your local data protection authority.

In California and other US states with privacy laws, you have the rights described under "Your choices". We don't sell personal information. For a coach who runs ads on Meta, what we tell Meta can count as "sharing" for advertising under some of these laws; Global Privacy Control, No thanks on the bar, or an email to us opts you out.

14Children

Our service is for adults. We don't knowingly collect details from anyone under 18; if you think we have, email us and we'll delete them.

15Changes to this policy

When we change this policy, we'll update it here and change the date at the top.

16Contact us

Acquisition Systems: acquisitionsystemsco@gmail.com.