WODBumP® Privacy Policy

This Privacy Policy explains how NOREP LLC collects, uses, discloses, and protects information in connection with the Service.

By accessing or using the Service, you consent to the practices described here and in our Terms of Service.

Minors (13–17): Minors may only create or use accounts with verified guardian consent or Merchant attestation. Parents/guardians are responsible for reviewing and consenting to the Terms of Service on the minor's behalf.

We use information to:

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts
• Link accounts to Stripe Connect for payments and payouts
• Provide customer support
• Comply with legal obligations
• Enforce Terms of Service
• Conduct analytics to improve performance and user experience
• Publish social posts to connected Instagram, Facebook, TikTok, or YouTube accounts when a Merchant directs us to do so

For GDPR / UK GDPR users, lawful bases for processing personal data include:

• Contract: Processing necessary to fulfill Terms of Service or enable transactions
• Consent: Where minors or other users explicitly provide consent (e.g., guardian consent for 13–17)
• Legitimate Interest: Analytics, fraud prevention, and platform improvement, provided rights are respected

We do not sell personal information. We may share information:

• With service providers processing data on our behalf
• To comply with law, legal process, or government requests
• To protect rights, safety, or security of the Company, users, or the public
• In connection with mergers, acquisitions, or asset sales
• With your consent or direction

Merchant & Minor Data: Shared only as necessary for platform operations, transactions, or with consent.

We collect personal info for minors only with verified guardian consent or Merchant attestation.

Collected info includes:

• Account/profile information
• Workouts, programs, progress, and performance data
• Communications with Merchants

Payments: Never stored directly; all processing via Stripe Connect.

Parents/guardians can request deletion of minor data by contacting team@wodbump.com.

All payment information is tokenized and processed via Stripe Connect.

We store only:

• Stripe Customer IDs
• PaymentMethod IDs
• Connect account IDs

We never store full card numbers, CVV codes, or bank account credentials.

Refunds, chargebacks, and disputes are handled solely by Merchants via Stripe.

Merchants may send marketing email to athletes and members through WODBumP when they connect a verified sending domain in Settings → Integrations on app.wodbump.com. Messages are sent from the Merchant's own domain and brand. Platform account messages (such as receipts, password resets, and billing notices) are handled separately and are not mixed with Merchant marketing campaigns.

Who receives marketing email: Contacts who have an ongoing relationship with the Merchant — for example by enrolling in a program, purchasing a membership, signing up through a website form, or opting in during checkout. Merchants must not upload purchased, rented, or scraped lists.

Unsubscribe: Every marketing email includes a clear unsubscribe link. Requests are honored immediately. Athletes may still receive transactional messages about their account or purchases after unsubscribing from marketing.

Deliverability controls: We monitor bounces and spam complaints, maintain suppression lists, and keep each Merchant's sending reputation isolated so one workspace cannot affect another.

To opt out of a Merchant's marketing emails, use the unsubscribe link in any message from that Merchant or contact the Merchant directly. For platform help, email team@wodbump.com.

Merchants may optionally connect Instagram, Facebook, TikTok, and/or YouTube accounts in Settings → Integrations on app.wodbump.com to publish marketing content from the Coach app. Athletes do not connect social accounts through this feature.

What we collect when you connect: OAuth access and refresh tokens, platform account or page/channel identifiers, display names or usernames, and metadata needed to publish (e.g., post IDs, publish job status). We do not use these integrations to read private messages, access advertising accounts, or build follower lists for resale.

How we use it: Solely to authenticate your connection and publish or schedule content you submit (captions, images, and videos). We act on your instructions only; we do not post without your action in the Service.

YouTube (Google) scopes: When you connect YouTube, WODBumP requests Google OAuth access only for:

• youtube.upload — upload YouTube Shorts (vertical video) when you publish from Marketing → Social.
• youtube.readonly — identify your connected channel during setup and read basic public statistics (views, likes, comments) for Shorts you published through WODBumP.

Google API Services User Data Policy: WODBumP's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it to data brokers, use it for creditworthiness or lending decisions, or train generalized AI/ML models on it.

Disconnecting: You may disconnect any platform in Settings → Integrations. We revoke stored tokens when you disconnect or when a platform notifies us of deauthorization.

Data deletion requests: For Meta (Instagram/Facebook), use Meta's data deletion flow or contact team@wodbump.com. Status and instructions are available at https://wodbump.com/privacy-policy. TikTok and YouTube users may also disconnect in the Service and request deletion by emailing us.

Each platform's own privacy policy and terms apply to your use of that platform, including Meta (Instagram/Facebook), TikTok, and Google (YouTube).

We use Firebase / Google Analytics for usage analytics on mobile apps and Coach web.

Analytics may include IP address, device info, app usage, and performance metrics.

iOS users are subject to App Tracking Transparency (ATT) consent prompts.

Opt-out: Users may opt out of analytics tracking by adjusting device settings, uninstalling the app, or using available privacy controls.

We do not use third-party advertising or retargeting pixels (e.g., Meta Pixel, Mixpanel, Segment) on the Service. Optional social publishing integrations are separate from site analytics and are used only when a Merchant connects an account and publishes content.

We retain information only as long as necessary to:

• Operate and improve the Service
• Comply with legal obligations
• Resolve disputes or enforce agreements

Approximate retention guidance:

• Minor accounts: retained until request for deletion or 13–17 period ends
• Merchant accounts: retained while active and up to 7 years for tax/transaction purposes
• General user accounts: retained while active; inactive accounts may be archived or deleted after 2 years

Depending on jurisdiction, users may:

• Access, correct, delete, or restrict processing of personal data
• Withdraw consent where applicable
• Exercise data portability rights

We will respond to verified requests in accordance with applicable law, typically within 30 days.

To exercise rights, contact team@wodbump.com.

We implement reasonable administrative, technical, and organizational safeguards.

Note: No system is 100% secure; transmission of data over the Internet is at your own risk.

Data may be transferred internationally, including to the US, for processing.

Where required, we rely on Standard Contractual Clauses or other legally recognized mechanisms for transferring personal data outside the EU/UK.

Integrations with third-party tools are governed by their privacy policies, including:

• Email delivery providers (Merchant marketing and platform transactional email)
• Stripe (payments)
• Firebase / Google (hosting, analytics, authentication)
• Meta — Instagram and Facebook (optional Merchant publishing)
• TikTok (optional Merchant publishing)
• Google — YouTube (optional Merchant publishing)

We are not responsible for third-party practices or policies.

The Service is not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has submitted data, contact us for deletion.

We may update this Privacy Policy from time to time.

Updated versions will be posted on https://wodbump.com.

Continued use constitutes acceptance of the updated Privacy Policy.

Email: team@wodbump.com

Address: NOREP LLC, 30 N Gould St. STE R, Sheridan, WY 82801 USA