Privacy Policy

Last updated: October 1, 2026

This policy explains what personal information we collect, why, who we share it with, and what rights you have.

Questions or requests: austin@smallmachine.co

1. Who We Are and What This Covers

Small Machine Company LLC (“Small Machine Co.”, “we”, “us”) operates the website at smallmachine.co, the Small Machine Co. membership community (hosted at community.smallmachine.co), the AI coaching program, and done-for-you AI installation services (together, the “Services”).

This policy applies to all of the Services. Where you have a separate agreement with us for a specific Service (for example the Community Terms and Conditions or the Client Service Agreement), that agreement governs the Service and this policy governs how we handle your personal information.

2. Information We Collect

Information you give us:

Account and contact information: your name and email address when you subscribe to our email list or a free email course, purchase a membership, book a call, or create a community profile.
Messages you send us: your name, email address and message when you use the contact form on our website, and anything you send us by email.
Consultation details: the answers you give when you request a roadmap call, including what you want to build and information about your business or role.
Payment information: processed by Stripe. We receive confirmation of payment, the last four digits of your card, and billing details. We never receive or store your full card number.
Community profile and content: anything you add to your profile and anything you post, comment, or send inside the community.
What you tell us directly: including your answer to what you want to automate.

Information collected automatically:

Usage data: pages viewed, links clicked, features used, and general activity within the community platform.
Device and technical data: IP address, browser type, device type, operating system, and referring URL.
Email engagement: whether emails we send are opened and which links are clicked.
Website analytics: our website uses cookieless analytics that records aggregate page views, referrers, device type and country. It does not set cookies and does not identify you.
Cookies and similar technologies: see Section 7.

We do not intentionally collect sensitive categories of personal information, and we ask that you not post or send them.

3. How We Use Your Information

To provide the Services: creating your account, giving you access, running sessions, scoping and delivering installation projects
To process payments and manage your subscription
To communicate with you about your membership or engagement, including receipts, updates, and support
To reply to messages you send through the contact form or by email
To write your build plan and respond to what you tell us you want to build
To deliver a free email course you signed up for, followed by our ongoing emails. Every email includes an unsubscribe link
To send marketing emails, where you have opted in or where permitted by law
To improve the Services, understand what is useful, and develop new material
To keep the Services safe, prevent fraud and abuse, and enforce our terms
To comply with legal obligations

We do not sell your personal information, and we do not share it with third parties for their own advertising.

4. Legal Bases for Processing (For People in the EU and UK)

Where GDPR or UK GDPR applies, we process personal data on these bases:

Contract: to provide the membership or service you purchased, or to respond to a request you made
Legitimate interests: to improve and secure the Services, and to communicate with existing customers about related offerings
Consent: for marketing emails to non-customers and for any non-essential cookies. You may withdraw consent at any time
Legal obligation: for tax, accounting, and compliance records

We share personal information with third-party service providers who help us operate the Services. Each processes data on our behalf, for our purposes only, under their own terms and security obligations. These providers fall into the following categories:

Community platform hosting, which stores member accounts, profiles, and community content
Payment processing and subscription billing
Email delivery and list management
Website and application hosting, including cookieless website analytics
Call scheduling, for roadmap calls and coaching sessions
Business productivity, automation and file storage, used for internal operations
Video conferencing, for live sessions
Databases and application infrastructure, where we store records about members, clients and requests

We do not authorize these providers to use your information for their own purposes.

We may also disclose information where required by law, to enforce our terms, to protect rights or safety, or in connection with a sale or transfer of the business, in which case we will notify you.

Other members can see your profile information and anything you post in the community. Treat community posts as visible to everyone in the community.

6. International Transfers

We are based in the United States and our service providers may process data in the United States and elsewhere. If you are in the EU, UK, or another region with different data protection laws, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses through our providers.

7. Cookies

Our website at smallmachine.co does not set cookies of its own. Its analytics are cookieless and do not identify you.

The community platform uses cookies and similar technologies to keep you logged in, remember preferences, and understand usage. Essential cookies are required for the community to function. You can control cookies through your browser settings, though disabling them may break parts of the community.

8. How Long We Keep Information

We keep your information for as long as your membership or engagement is active and afterward as needed for legitimate business purposes: honoring your founding price if you return, resolving disputes, and meeting tax and accounting obligations, which typically requires keeping transaction records for 7 years. Community content you posted may remain visible after you leave unless you ask us to remove it.

Messages sent through the contact form are kept for as long as needed to respond and follow up, and then for our records.

You can request deletion at any time (Section 9).

9. Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion of your information
Object to or restrict certain processing
Receive your information in a portable format
Withdraw consent where processing is based on consent
Opt out of marketing emails at any time, using the unsubscribe link or by emailing us
Not be discriminated against for exercising these rights

California residents have rights under the CCPA/CPRA, including the right to know what personal information is collected, to request deletion, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined.

To exercise any right, email austin@smallmachine.co. We will respond within the timeframe required by applicable law. We may need to verify your identity first.

10. Security

We use reasonable technical and organizational measures to protect your information, including access controls, encryption in transit, and multi-factor authentication on our accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Please do not post or send confidential information, client data, credentials, API keys, or personal information belonging to others through the community, the contact form, or email. When sharing a build for help, remove real names, keys, and identifying details first.

11. Children

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Third-Party Links

The Services link to third-party websites and tools. We are not responsible for their privacy practices. Review their policies before providing information.

13. Changes to This Policy

We may update this policy. If we make material changes, we will notify you by email or through the Services. The “Last updated” date reflects the current version.

14. Contact

Small Machine Company LLC austin@smallmachine.co