PRIVACY POLICY

Effective Date: April 10, 2026

Last Updated: April 10, 2026

This Privacy Policy describes how Amanda Heyman, d/b/a A. Heyman Strategies ("A. Heyman Strategies," "Base Layer," "we," "us," or "our") collects, uses, discloses, and safeguards information when you:

• Visit or interact with www.amandaheyman.com (the "Website");

• Access or use the Base Layer digital platform, currently hosted through Kajabi (the "Platform"); or

• Communicate with us in connection with either of the above.

By using the Website or the Platform, you agree to the practices described in this Privacy Policy.

IMPORTANT NOTICE: This Website and the Base Layer Platform provide business consulting, education, and strategic advisory services only. Nothing on this Website or Platform constitutes legal advice or creates an attorney-client relationship. Amanda Heyman is licensed to practice law in the State of Minnesota. She is not licensed to practice law in the State of California. Use of this Website or Platform does not create an attorney-client relationship.

1. Information We Collect

a. Information You Provide Directly

When you use the Website or the Platform, you may voluntarily provide:

• Name and contact information (e.g., email address)

• Billing or payment information (processed by third-party providers)

• Information submitted through contact forms, intake forms, assessments, or shared documents

• Login credentials for the Platform (we store usernames; passwords are encrypted and not visible in our records)

• Communications sent to us by email, message, or other means

b. Automatically Collected Information

When you access the Website or the Platform, certain technical information is collected automatically, including:

• IP address and general location data

• Browser type, device type, and operating system

• Referring website and pages viewed

• Dates and times of access

• Links clicked and other usage data

This information is used to operate, maintain, and improve the Website and Platform.

c. Cookies and Similar Technologies

The Website and Platform may use cookies — small data files stored on your browser — to personalize your experience, remember your preferences, and collect analytics data. We may use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted).

You may disable cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain features of the Website or Platform.

d. Information from Third Parties

We may receive information about you from third-party service providers in connection with your use of the Website or Platform, such as payment processors or scheduling tools.

2. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Website and the Platform

• Provide access to Base Layer materials, resources, and consulting services

• Process payments and manage subscriptions and accounts

• Communicate with you regarding your account, services, updates, and administrative matters

• Respond to your inquiries and provide user support

• Track and measure usage and performance of the Website and Platform

• Improve content, functionality, and user experience

• Maintain security and prevent unauthorized or illegal activity

• Comply with applicable legal and contractual obligations

We do not sell your personal information.

3. Trademark Notice

"Base Layer" is a pending federal trademark of Amanda Heyman d/b/a A. Heyman Strategies. Unauthorized use of this mark is prohibited.

4. Third-Party Service Providers

We use third-party service providers to support the Website and Platform. Each provider's use of your information is governed by its own privacy policy. We currently use the following third-party services:

Squarespace – Our Website (amandaheyman.com) is hosted on Squarespace. Squarespace automatically collects certain visitor data, including IP addresses, browser type, and pages viewed, in accordance with its own privacy policy.

Kajabi – The Platform is hosted on Kajabi, which also delivers Platform-related, member, and marketing communications emails. Kajabi may collect and process information related to your use of the Platform and associated email communications in accordance with its own privacy policy.

Gmail (Google) – We use Gmail to manage direct email correspondence with clients and prospective clients. Google may process email metadata and content in accordance with its own privacy policy. We do not use Gmail for bulk marketing communications.

Ghost – We use Ghost as our publicly accessible publishing and newsletter platform. Ghost content is available to anyone on the internet without registration. If you voluntarily subscribe to our newsletter or publications through Ghost, Ghost will collect and process your email address and subscription preferences in accordance with its own privacy policy. Ghost subscribers are not required to be Base Layer Platform users.

Google Analytics / Google Search Console – Used to track Website usage and performance. Google Analytics may capture your IP address; no additional personal information is collected by Google Analytics on our behalf.

QuickBooks – We use QuickBooks (Intuit) to manage invoicing and payment processing. Only the information necessary to process your payment and maintain financial records is shared with QuickBooks. We do not store full payment card information on our systems.

Zoom – We use Zoom for video consultations and client meetings. Zoom may collect and process information related to your participation in meetings, including your name, email address, and meeting content, in accordance with its own privacy policy.

Otter.ai – We may use Otter.ai to transcribe consultations or meetings. Otter.ai captures audio and generates transcripts; it does not store audio after transcription is complete. Participants are notified of its use prior to meetings through scheduling confirmations and/or verbal disclosure at the start of each call. Transcripts are used for internal reference only and are not shared with third parties except as described in this Privacy Policy. Otter.ai processes transcript data in accordance with its own privacy policy.

Granola – We may use Granola, an AI-enabled meeting notes tool, to generate transcripts and organize notes from consultations or internal meetings. Granola captures audio in real time for transcription purposes only and does not record or store audio after transcription is complete. Participants are notified of its use prior to meetings through scheduling confirmations and/or verbal disclosure at the start of each call. Notes and transcripts generated through Granola are used for internal operational purposes only.

Google Drive – We use Google Drive to store and manage business documents, client materials, and internal files. Information stored in Google Drive is subject to Google’s privacy policy. We take reasonable steps to limit access to documents containing personal information.

Dropbox – We use Dropbox for document storage and file sharing, including executed agreements and client-facing materials. Information stored in Dropbox is subject to Dropbox’s privacy policy. Access to shared files is limited to authorized parties only.

Scheduling Software – We may use third-party scheduling tools (e.g., Calendly) to facilitate appointment bookings. These tools may access our calendar and collect information you provide during the scheduling process.

Artificial Intelligence Tools – We use artificial intelligence tools to support content development, document drafting, research, and internal operational tasks. These tools may include Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), and similar large language model platforms. We do not knowingly input sensitive personal information — such as financial data, health information, or government-issued identification numbers — into AI tools. Where client context is used to inform AI-assisted work product, we use the minimum information necessary and exercise judgment about what is appropriate to include. Each AI tool provider processes inputs in accordance with its own privacy policy, and we encourage you to review those policies for information about how your data may be used to train or improve AI models. Output generated by AI tools is reviewed and edited by a human before use in any client-facing or operational context.

This Website contains links to third-party landing pages and forms, including pages hosted on Kajabi (such as waitlist and enrollment pages). When you submit information through a linked third-party page, that submission is governed by the third party's privacy policy. We encourage you to review applicable third-party privacy policies before submitting personal information.

This list may be updated from time to time. We are not responsible for the privacy practices of any third-party platform or service provider.

5. Artificial Intelligence Tools

We may use AI-enabled tools to support internal operations, such as summarizing meeting notes or organizing information for our own use.

• We do not knowingly input confidential client information into AI systems that train on user data.

• Users agree not to input Base Layer proprietary materials, course content, or template documents into AI tools that train on user inputs.

6. Platform Content and Educational Materials

The Base Layer Platform contains educational and informational content, including videos, written materials, and business document templates. This content is provided for educational and strategic advisory purposes only and does not constitute legal advice.

All Platform content is proprietary to A. Heyman Strategies. Unauthorized reproduction, distribution, or commercial use of Platform materials is prohibited.

7. How We Share Your Information

We may share your information only in the following circumstances:

• With service providers who assist in operating the Website or the Platform, and only to the extent necessary to perform their services

• To comply with applicable laws, regulations, court orders, or lawful government requests

• To enforce our agreements or protect our rights, property, or safety, or that of our users

• In connection with a business transfer, merger, acquisition, or reorganization, in which case your information may be transferred as a business asset

• With your explicit consent

We do not share personal information for marketing purposes unrelated to our services. We do not sell personal information.

8. Anonymous and Aggregated Data

We may use and share anonymous or aggregated data that does not identify you individually for analytics, research, marketing, or other business purposes.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Website and Platform services

• Comply with applicable legal obligations

• Provide client service

• Communicate with prospective, current, and potential clients

• Resolve disputes

• Enforce our agreements

Access to Platform materials may be terminated before or after any applicable data retention period.

10. Data Security

We implement reasonable administrative, technical, and organizational measures to protect your personal information. However, no system or method of data transmission can be guaranteed to be 100% secure. Your use of the Website and Platform is at your own risk.

11. Your Privacy Rights and Choices

You have the following rights with respect to your personal information:

Opt-Out: You may opt out of marketing or non-essential communications by following the unsubscribe link in any email or by contacting us at hello@amandaheyman.com.

Access: You may request access to the personal information we hold about you by contacting us at hello@amandaheyman.com.

Correction: You may request that we update or correct inaccurate personal information by contacting us at hello@amandaheyman.com.

Deletion: In certain circumstances, you may request that we delete your personal information by contacting us at hello@amandaheyman.com. Please note that we may need to retain certain information for recordkeeping purposes, to complete transactions, or as required by law.

This Website is operated in compliance with the California Online Privacy Protection Act (CalOPPA). Our Website does not currently respond to "Do Not Track" signals from browsers. If this practice changes in the future, this Privacy Policy will be updated accordingly.

12. Sensitive Personal Information

Please do not submit sensitive personal information through this Website or the Platform. Sensitive personal information includes, but is not limited to, Social Security numbers, government-issued identification numbers, financial account numbers, health or medical information, or criminal background.

If you choose to submit such information, it will be subject to this Privacy Policy and handled with additional care; however, we strongly discourage its submission.

13. Children's Privacy

The Website and Platform are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@amandaheyman.com and we will take prompt steps to remove such information.

14. User Responsibilities

By using the Website or Platform, you agree to:

• Maintain the confidentiality of your login credentials

• Use the Website and Platform in compliance with applicable laws and our Terms of Use

• Refrain from submitting sensitive personal information unless expressly requested

• Refrain from using Base Layer proprietary content, templates, or materials in unauthorized ways

15. Links to Third-Party Websites

The Website or Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of the Website or Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy.

17. Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to its conflict-of-law principles.

18. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Amanda Heyman

d/b/a A. Heyman Strategies | Base Layer

Email: hello@amandaheyman.com

Website: www.amandaheyman.com