Last updated: September 12, 2025
This Privacy Policy explains how Auto Income Factory (“we”, “us”, “our”) collects, uses, and shares information about you when you visit
autoincomefactory.com (the “Site”), subscribe to notifications or email updates, or otherwise interact with us.
This page is for transparency and does not constitute legal advice.
Who We Are
Data Controller: Auto Income Factory. Contact us via the Contact form.
What We Collect
We collect information that you voluntarily provide and information that is collected automatically when you use the Site.
- Contact form data (via our forms plugin): name, email, message, and consent checkbox.
- Newsletter data (if you subscribe): email, name (optional), consent timestamp, subscription status, and engagement (opens/clicks).
- Web push data (if you opt in): a browser/device push token, subscription status, segments/tags (e.g., interest in certain categories), approximate location (based on IP), device and OS.
- Technical data: IP address, user‑agent, pages viewed, referring URL, timestamps, approximate geolocation, device type, and performance metrics.
- Cookies and similar technologies: see “Cookies” below.
How We Use Information
- Provide, maintain, and improve the Site and its features (legitimate interests).
- Send you web push notifications and/or emails you opt in to (consent; you can withdraw at any time).
- Analytics and measurement to understand content performance (legitimate interests).
- Security and abuse prevention (legitimate interests).
- Compliance with legal obligations.
Legal Bases (GDPR)
- Consent for web push and email marketing.
- Legitimate interests for basic analytics, security, and site operation.
- Contract when you request something we need to deliver (e.g., reply to your message).
- Legal obligation where applicable (e.g., tax, accounting).
Cookies
Cookies are small files placed on your device. We use:
- Strictly necessary cookies to run the Site (session, security, caching).
- Analytics cookies to measure traffic (e.g., Google Analytics) — we do not use them to identify you directly.
- Marketing cookies only if/when you interact with external services (e.g., embedded media) or opt into notifications.
You can control cookies in your browser settings and via our site banner (if displayed). Blocking some cookies may impact functionality.
Services We Use (and what they may process)
- Hosting & Caching: our host and performance services (e.g., CDN, image optimization) may process IP addresses and content assets to deliver the Site quickly. Example: LiteSpeed Cache with QUIC.cloud can handle image/asset optimization and delivery.
- Analytics: Google Analytics 4 (via Google Site Kit) collects aggregated usage data (page views, device, region). IPs can be processed; GA4 supports IP anonymization. Opt‑out: browser add‑on or disable analytics cookies.
- Web Push: OneSignal provides push notifications. They process device tokens, subscription status, approximate location (by IP), device/OS, segments, and notification performance. You can unsubscribe anytime via your browser or the site’s bell icon.
- Email: If we run newsletters (e.g., via FluentCRM/MailPoet), your email, name (if given), consent, and engagement (opens/clicks) are stored to deliver emails and measure performance. You may unsubscribe any time.
- Forms: Our forms plugin stores your submitted content (name, email, message). We use honeypot and optional reCAPTCHA to prevent spam.
- Error monitoring & logs: our systems log IPs and user‑agents for brief periods to diagnose problems and prevent abuse.
Data Sharing
We do not sell your personal information. We share data with service providers strictly to operate the Site (hosting, analytics, email, push).
We may disclose information if required by law or to protect our rights and users.
International Transfers
Our service providers may process data in countries outside your own (including the United States). Where required, we rely on lawful transfer mechanisms (e.g., SCCs) provided by those vendors.
Data Retention
- Contact form messages: typically kept for up to 24 months unless needed longer for support/compliance.
- Newsletter records: kept while you are subscribed and for a reasonable period thereafter to maintain suppression lists.
- Web push tokens: kept while you remain subscribed; removed when you unsubscribe or become inactive.
- Analytics data: stored by providers per their retention settings (e.g., GA4 default 2–14 months for event data; aggregated reports may persist longer).
- Server logs: typically 30–90 days unless investigating security issues.
Your Rights
If you are in the EU/EEA, UK, or jurisdictions with similar laws, you may have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict processing; withdraw consent at any time.
- Data portability (a copy of your data in a structured format).
- Lodge a complaint with your supervisory authority.
To exercise rights, contact us via the contact page. We may ask for information to verify your request.
California Residents (CPRA)
We do not sell personal information. You may request to know, correct, or delete personal information we hold about you and to limit use of sensitive personal information where applicable.
Children’s Privacy
The Site is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child provided us information, contact us and we will delete it.
Security
We use reasonable technical and organizational measures to protect data (HTTPS, access controls, least‑privilege, backups). No method is 100% secure.
Your Choices
- Cookies: use your browser controls to block or delete cookies; adjust our site banner if available.
- Analytics: install the Google Analytics opt‑out add‑on or block analytics cookies.
- Web Push: unsubscribe via the site’s bell icon or your browser’s site permissions.
- Email: click “unsubscribe” in any email or contact us.
Third‑Party Links
Our content contains links to external websites and tools. Their privacy practices are governed by their own policies.
Changes to This Policy
We may update this policy to reflect changes to our practices or legal requirements. Material changes will be highlighted on this page.
Contact
Questions or requests, contact us via the contact form.
Service Provider References
- Google Analytics: https://policies.google.com/privacy
- OneSignal: https://onesignal.com/privacy
- LiteSpeed/QUIC.cloud: https://quic.cloud/privacy-policy/
- FluentCRM: https://fluentcrm.com/privacy-policy/
- MailPoet: https://www.mailpoet.com/privacy-notice/