Privacy Policy

Effective date: September 19, 2026
Last updated: September 19, 2026

1. Who we are

Top Hands, Inc. ("Top Hands," "we," "us," "our") is a Delaware corporation providing AI application development, training, and coaching services to businesses and professionals.

This policy explains what we collect when you visit tophands.com, submit a form, subscribe to our emails, or purchase a service, and what we do with it.

Contact: legal@tophands.com
Postal: Top Hands, Inc., 8 The Green, Suite #12501, Dover, DE 19901

2. What this policy covers, and what it doesn't

Covered: information we collect about visitors to our website, prospects, applicants, subscribers, and purchasers of our services.

Not covered: data belonging to our clients that we access or process while delivering services. That is governed by the services agreement and any data processing terms signed with that client. We handle it as their confidential information, not as our own, and we do not use it for our own purposes. See Section 8.

3. Information we collect

You give us

• Contact and business details — name, business name, email, phone, website, company size, annual revenue range, and what you tell us about your operational bottlenecks, through forms on our site or in conversation.
• Application information — if you apply for a training cohort or coaching, what you submit as part of that.
• Payment information — processed by Stripe. We receive confirmation, the last four digits, and billing details. We never see or store full card numbers.
• Communications — email, calls, meetings, and support requests.
• Recordings — where sessions are recorded, with notice and consent. See Section 9.

Collected automatically

• Device and usage data — IP address, browser and device type, operating system, referring URL, pages viewed, time on page, and links clicked.
• Cookies and similar technologies — see Section 5.

From third parties

• Advertising and analytics platforms — aggregate campaign performance and audience data from Meta, LinkedIn, Google and YouTube.
• Referrals — if an existing client or partner refers you, we receive your name and contact details from them.
• Publicly available business information used to qualify prospects.

4. How we use it

• Responding to enquiries and delivering the services you request
• Scheduling, preparing for, and following up on sessions
• Processing payments and managing subscriptions
• Sending service communications about your engagement
• Sending marketing emails you can unsubscribe from at any time
• Measuring and improving our marketing, including advertising on Meta, LinkedIn, Google and YouTube
• Improving our website, content, and services
• Maintaining security and preventing fraud
• Meeting legal, tax, and accounting obligations

We do not sell personal information for money. Our use of advertising and analytics cookies may constitute "sharing" or "selling" under certain US state privacy laws. See Section 11.

5. Cookies and tracking

We use cookies and similar technologies for the following purposes.

We fire a conversion event when a form is successfully submitted, which tells our advertising platforms that a conversion occurred.

Your choices. Most browsers let you block or delete cookies. Blocking essential cookies may break parts of the site. You can also opt out through platform settings at Meta, LinkedIn and Google, and through industry tools such as the Network Advertising Initiative and the Digital Advertising Alliance.

6. Email and marketing

We send marketing email to people who have given us their details or with whom we have an existing business relationship, consistent with the CAN-SPAM Act. Every marketing email includes an unsubscribe link and our physical mailing address. Unsubscribing stops marketing email but not messages about an active engagement — invoices, scheduling, and service notices.

Where we conduct outbound business-to-business email, we identify ourselves, describe the purpose, and honour opt-outs promptly.

7. Artificial intelligence in our work

This section matters more for us than for most companies, so we state it plainly.

We use large language models and related AI systems to deliver our services. That means content you provide — specifications, requirements, documents, code, and business context — may be processed by third-party model providers acting as our service providers.

How we handle this:

• We use enterprise, business, or appropriate-tier arrangements with model providers where available, which generally exclude submitted content from being used to train their models.
• Where a client's data is sensitive, we can discuss local or private model deployment as part of the engagement.
• The specific providers we use may change as the technology changes. Current providers are listed in Section 10.
• Our verification method deliberately uses a model from a different vendor than the one used to build, which means work may be processed by more than one provider.

8. Client data

When we build software or provide services, we frequently work inside our clients' own accounts and systems using credentials they provide.

• Client data stays in the client's infrastructure. We do not copy it to our own systems except as necessary to deliver the work, and only as permitted by the services agreement.
• Access is limited to the people working on that engagement.
• Credentials are handled securely and access is revoked at the end of an engagement.
• Client data is confidential. We do not use it to market to third parties, and we do not use one client's data to benefit another.
• Where a client's own end users' personal data is involved, the client is the controller and we act as a processor or service provider under the terms signed with them.

9. Recordings, case studies and references

Training and coaching sessions may be recorded for participant review and for developing our materials. All meetings are recorded, unless a participate explicitly states they do not want to be recorded.

We use client work as case studies or references only with written permission, and we anonymise where asked.

10. Who we share it with

We share information with service providers who help us operate, each bound by confidentiality obligations and permitted to use it only to provide services to us.

We also share information where required by law, to protect our rights or the safety of others, and with an acquirer or successor in the event of a merger, acquisition, or sale of assets.

We do not sell your personal information.

11. Your privacy rights

US state privacy laws

Depending on where you live, you may have the right to know what we collect, request a copy, request correction or deletion, opt out of sale, sharing, or targeted advertising, and be free from discrimination for exercising these rights.

To exercise any of these, email legal@tophands.com. We will verify your identity before responding and will respond within the period the applicable law requires. You may use an authorised agent where the law permits.

If you are in the EU, UK, or another region with comparable law

You may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. Our legal bases are typically contract performance, legitimate interests in operating and marketing our business, consent for certain cookies and marketing, and compliance with legal obligations.

We are based in the United States, so information will be transferred to and processed in the US. Where required, we use appropriate safeguards for those transfers. You may lodge a complaint with your local supervisory authority.

12. Retention

We keep information for as long as needed for the purpose it was collected, and afterwards as required for legal, tax, accounting, and dispute-resolution purposes.

13. Security

We use reasonable technical and organizational measures appropriate to the sensitivity of the information, including access controls, encryption in transit, and limiting access to those who need it. Payment card data is handled by Stripe and never stored in our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children

Our services are for businesses and working professionals. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

15. Third-party sites

Our site links to other websites we don't control. This policy doesn't cover them. Read their policies before providing information.

16. Changes

We may update this policy. We will change the "last updated" date and, for material changes, give notice on the site or by email. Continuing to use the site after changes take effect means you accept the updated policy.

17. Contact

Email: legal@tophands.com
Post: Top Hands, Inc., 8 The Green, Suite #12501, Dover, DE 11901