This policy explains which personal data we process on this website, when you buy a SaaSMarketingLab product and when you join the SaaSMarketingLab community (Art. 13 GDPR).

1. Controller

Figuralist LLC (brand: SaaSMarketingLab) Represented by Bozhena Mykolaychuk Tornimae 5, 10145 Tallinn, Estonia Email: [email protected]

2. Website hosting

This website runs on HighLevel, operated by HighLevel, Inc., 400 N Saint Paul St, Suite 920, Dallas, TX 75201, USA. When you visit the website, HighLevel processes your IP address, date and time of access, browser, operating system and referrer URL. We need this data to deliver the website and keep it secure. Legal basis: our legitimate interest in a working, secure website (Art. 6 Para. 1 lit. f GDPR). Log data is deleted as soon as it is no longer needed for this purpose.

3. Cookies and Meta Pixel

We set essential cookies that the website needs to work, for example to store your cookie choice. These do not require consent.

If you click "Accept" in the cookie banner, we also use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel shows us whether people who saw our ads on Facebook or Instagram visit our website or buy a product. We use this to measure our ads and show them to relevant people. The pixel sends your IP address, browser data, the pages you visit and purchase events to Meta. Legal basis: your consent (Art. 6 Para. 1 lit. a GDPR, Art. 5 Para. 3 Directive 2002/58/EC). You can withdraw your consent at any time via "Cookie settings" in the footer.

We and Meta are joint controllers for collecting and transmitting this data (Art. 26 GDPR, Meta Controller Addendum). Meta is solely responsible for any further processing (Meta Privacy Policy).

4. Purchase and payment (Stripe)

You pay on a checkout page of Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your name, email address, payment details and billing information directly with Stripe. We never see your full card number. We receive your name, email address, billing details, the products you bought and the payment status.

We use this data to process your order, give you access and handle refunds (Art. 6 Para. 1 lit. b GDPR), and to meet our accounting and tax obligations (Art. 6 Para. 1 lit. c GDPR). Without this data we cannot process your order. Stripe also processes data as an independent controller for fraud prevention and its legal obligations (Stripe Privacy Policy).

5. Customer data and emails (HighLevel)

We store your name, email address and purchases in HighLevel and use it to send you your access details and information about your order (Art. 6 Para. 1 lit. b GDPR). As a customer, we may also email you about similar SaaSMarketingLab products (Art. 6 Para. 1 lit. f GDPR, Art. 13 Para. 2 Directive 2002/58/EC). You can unsubscribe at any time via the link in every email.

6. Community (Skool)

The community runs on Skool (skool.com). After your purchase, we send an invitation to your email address. To join, you create a Skool account, which Skool processes under its own privacy policy. Inside the community, we see your name, profile and posts. Legal basis: Art. 6 Para. 1 lit. b GDPR.

7. Contact

If you email us, we use your data to answer your request (Art. 6 Para. 1 lit. b GDPR if it concerns a purchase, otherwise lit. f).

8. How long we keep data

Order and payment records: as long as accounting and tax law requires.

Customer data in HighLevel: until you ask us to delete it, unless we must keep it by law.

Community membership: until you leave the community or receive a refund.

Meta Pixel data: until you withdraw consent or the cookie expires.

Emails: until your request is closed.

9. Transfers to the USA

HighLevel, Stripe, Meta and Skool process data in the USA. Stripe and Meta are certified under the EU-US Data Privacy Framework (Art. 45 GDPR). For HighLevel, we rely on the EU standard contractual clauses (Art. 46 GDPR).

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 Para. 3).

Right to object: you can object at any time to processing based on our legitimate interest (Art. 21 GDPR), including product emails.

To use your rights, email [email protected]. You can also lodge a complaint with a data protection authority, for example in your country of residence (Art. 77 GDPR).

Last updated: September 2026