Privacy Policy
What personal information we collect, why, who processes it for us, how long we keep it, and how to exercise your rights.
1. Who is responsible
TAKE OVER ALL LLC, a Wyoming limited liability company operates 100mil.org and is responsible for the personal information described here. Address: 30 N Gould St #40422, Sheridan, WY 82801, USA. Privacy questions and requests: support@100mil.org.
2. Information we collect
We collect only what we need to run your account, deliver your purchases, and keep the service secure:
- Account information: your email address, optional name, a one-way hash of your password (never the password itself), whether your email is confirmed, the version of the terms you accepted, and sign-in timestamps.
- Order information: the product, price, currency, order status, the terms version accepted at checkout, and payment references from Whop such as checkout and payment identifiers. Whop shares the payment result and details you enter at checkout (such as email and country).
- Payment details: entered directly on Whop's checkout page. We never receive or store full card numbers or security codes.
- Support messages: the email address, subject, and message you send us.
- Technical information: IP address, browser information, requested pages, and timestamps processed by our servers to deliver the site and prevent abuse. For rate limiting we store only a keyed, irreversible hash of your IP address for about one hour.
- A sign-in cookie, described in the Cookie Policy.
3. How we use it
We use your information to create and secure your account, process payments, deliver products by email and in your account, provide support, handle refunds and disputes, prevent fraud and abuse, and meet tax, accounting, and legal obligations.
Where data-protection law requires a legal basis, we rely on performance of a contract (your account, orders, and delivery), legal obligations (tax and accounting records), and legitimate interests (security, fraud prevention, and improving the store).
4. Emails we send
We send transactional emails only: email-address confirmation, password resets, order delivery, and replies to your support requests. We do not send marketing email unless you separately opt in, and you can withdraw that consent at any time.
5. Service providers and sharing
Whop processes payments and performs fraud screening as an independent provider under its own privacy policy, available on whop.com. Our website and database run on servers rented from our hosting provider, and emails are sent through our email provider. These providers process information on our instructions or under their own legal obligations.
We may disclose information where the law requires it or to protect our rights, customers, or the public. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we do not make automated decisions that have legal or similarly significant effects on you.
6. International processing
We are a United States company, and our providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses offered by our providers.
7. How long we keep information
We keep information only as long as needed:
- Accounts: until you delete your account. Sign-in sessions expire after 30 days or when you sign out.
- Email confirmation links expire after 7 days and password-reset links after 1 hour.
- Completed orders: 7 years, to meet tax and accounting obligations — also after account deletion, but no longer linked to a login.
- Abandoned or failed checkouts: deleted after 30 days.
- Support messages: deleted after 12 months. Payment event records: deleted 90 days after processing.
- Delivery links are encrypted while queued and removed from the email queue once sent.
8. Security
The site is served only over HTTPS. Passwords are stored as salted scrypt hashes, sign-in and order access tokens are stored only as hashes, queued email details are encrypted, and the database is not reachable from the public internet. Card data is handled by our payment processor and never reaches our servers. No online service is perfectly secure; we will notify you of a breach where the law requires.
9. Your rights
Depending on where you live, you may have the right to access, correct, download, or delete your personal information, to restrict or object to processing, to withdraw consent, and to complain to a data-protection authority. Residents of California and other U.S. states with privacy laws may have rights to know, delete, and correct information, and to opt out of its sale or use for targeted advertising — which we do not do.
You can update your name, change your password, and delete your account in My account. For other requests, email support@100mil.org from your account email address. We may need to verify your identity, and we respond within the time required by law. If we decline a request, you may appeal by replying to our decision. We honor Global Privacy Control signals.
10. Children
Our store is for adults. You must be 18 or older to create an account. We do not knowingly collect information from children under 13, and we delete it if we learn that we have.
11. Changes
We will update this policy when our practices change and show the new effective date and version at the top. We will tell account holders about material changes by email.