Privacy Notice

Last updated October 25, 2026

Who's responsible for your data

Dana Marie Blackwell, doing business as The L&BP Point, is the data controller for personal data collected through the Service. That means we decide how and why it's used.

What we collect and why

• Account details (name, email, login credentials) — to create and secure your account. Basis: performing our contract with you.
• Your plans and content (life and business plans, budgets, vision boards, town documents, day items, letters) — to provide the Service. Basis: contract.
• Messages with LP — to give you AI answers and keep your chat history. Basis: contract.
• Assistant settings and permissions — so LP behaves the way you chose. Basis: contract and your consent.
• Usage and device data (IP address, browser, device identifiers, error logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — to help you. Basis: legitimate interests.

Card details are collected by Paddle directly, not by us.

Who we share it with

• Service providers who host the app, store data, and run AI models for LP, only as needed to run the Service.
• Paddle, our Merchant of Record, for selling the product, payments, tax compliance and invoicing.
• Professional advisers such as legal or accounting advisers, when needed.
• Authorities where the law requires it.

We don't sell your personal data.

How long we keep it

We keep your data while your account is active. When you delete your account or it's no longer needed, we delete or anonymise it, except where the law requires us to keep records longer.

Your rights

Depending on where you live (including under laws such as the Colorado Privacy Act and GDPR), you can ask to access, correct, delete or export your data, object to or restrict certain uses, and withdraw consent. You can also complain to your local data protection authority. Contact us through the Service to make a request; we'll respond within the time the law requires.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls that limit your data to your own account.

Cookies and storage

We use only essential browser storage to keep you signed in and remember your settings (like LP's name and permissions). We don't use advertising cookies. You can clear this storage in your browser, but you'll be signed out.

International transfers

Our providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.