Privacy
Privacy Policy
Draft privacy policy for the 2027 AI Agency 60-Day Challenge. It does not take effect until the operator details and legal review are complete.
Two details must be filled in by the operator
1Who is responsible for your information
The 2027 AI Agency 60-Day Challenge platform is operated by [operator to confirm: legal entity name and registered address] (“we”, “us”). We are the controller of the personal information described here. For any privacy question or request, contact [operator to confirm: privacy contact email].
2Information we collect
Account information. We store the email address you use to sign in, together with an account identifier and the times you signed in. Sign-in works by a one-time link sent to that address, so there is no password to set or store.
Entry information. Your display name, profile photo, niche and public profile text, which you choose and can edit.
Submission evidence. Client names and details, sales-call recording links and files, launch proof, invoices, payment confirmations and the amounts you report. This is the material human reviewers need in order to verify a result.
Eligibility information. Your declaration about revenue collected before the challenge, your agency identifier, and records of your GoHighLevel account status obtained under the registration link.
Technical information. Server logs including IP address, timestamps, requested pages and error records, kept for security, abuse prevention and debugging.
We do not ask for and do not want payment card numbers, bank credentials, government ID numbers, health information or any other special-category data. Please redact those from anything you upload.
3Why we use it, and our legal bases
To run your account and the challenge (performance of a contract with you); to verify submissions, confirm eligibility, rank entries and award prizes (performance of a contract and our legitimate interest in a fair competition); to keep the platform secure and prevent fraud or abuse (legitimate interest); and to meet tax, prize-fulfilment and record-keeping obligations (legal obligation). Where consent is the basis — for example publishing your photo on the public standings — you can withdraw it at any time by removing the content or asking us to hide your entry.
We do not sell your personal information, we do not share it with advertisers, and we do not use it to train AI models.
4What is public and what stays private
Public, for eligible entrants only: your real name, profile photo, niche, verified client count, approved money collected and global rank.
Private, never published: your email address and account details, client names and details, sales-call recordings and every other piece of evidence, invoices and payment references, agency identifiers, provider and eligibility records, reviewer notes, and finalist verification material. Evidence files are held in private storage and opened only by you and authorised reviewers, through short-lived access links.
If your entry is hidden, paused or removed, your profile and figures stop appearing in the public standings.
5Who else can see your information
Authorised reviewers on the challenge team, for the sole purpose of reviewing evidence and verifying eligibility. Service providers who host the platform, database, authentication and private file storage under contract on our behalf. The email delivery service that carries your sign-in link. GoHighLevel, in respect of the account status that determines eligibility. And authorities or advisers where the law requires it or where it is necessary to establish or defend legal claims.
6International transfers
Our hosting and storage providers may process data in countries other than yours, including the United States. Where information leaves the UK or EEA we rely on the recipient's appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.
7How long we keep it
Account and entry records: while your account exists, then deleted or anonymised within 90 days of your deletion request. Submission evidence: for the duration of the challenge and up to 12 months after the final results are published, so that decisions, ties and any dispute can be re-examined; then deleted. Review decisions and approved-total history: kept as an immutable audit record of the competition, minimised to what is needed to show the outcome. Security logs: up to 12 months. Records we must keep for tax or prize-fulfilment reasons are kept for the period the law requires.
8Your rights
Depending on where you live you may ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or export it in a portable form. You can also withdraw consent and ask for your entry to be hidden. Write to [operator to confirm: privacy contact email] and we will respond within one month. You may complain to your data protection authority — in the UK, the Information Commissioner's Office.
Deleting evidence for a submission that has already been approved may mean that result can no longer be verified, and it can be withdrawn from the standings as a consequence.
9Security
Access to your private data is enforced on the server, not in your browser: every request is checked against your account. Evidence lives in private storage that is unreachable without a signed, expiring link issued to you or a reviewer. Reviewer permissions are granted server-side only, decisions are recorded with the reviewer's identity and time, and sensitive actions are logged and protected by server-side authorization. No system is perfectly secure; if a breach affects your rights we will notify you and the relevant regulator as required.
10Finalist verification
Finalists confirm their client and payment records, and their pre-challenge revenue, privately with Carson by screen-share. These sessions are not recorded automatically and no verification material is published. We retain as little as possible from the session — a note of what was confirmed — and redact anything used outside that review.
11Children
The platform is not intended for anyone under 18 and we do not knowingly collect their information. If you believe a minor has registered, contact us and we will remove the account.
12Cookies and local storage
We use only what the platform needs to work: a session record kept on your device so you stay signed in, and a short-lived note of the page you were heading to when you signed in. There is no advertising, profiling or third-party analytics tracking on this site.
13Changes
If we change this policy we will update the effective date above and, for material changes affecting your rights, tell participants directly. The version in force is always the one published here.
