Privacy policy

Top Dog SF Academy (“we”, “us”) is the online training academy of Top Dog SF, operated by Top Dog Supply LLC, 2121 Taraval St, San Francisco, CA 94116, United States. Top Dog Supply LLC is the data controller for the personal information described here. You can reach us any time at hello@topdogsfacademy.com.

Account details. Your name, email address, and a password (stored only as a secure hash — we never see or store the password itself). If you sign in with Google, we receive your name and email from Google instead.

Onboarding details you choose to share. To personalize your experience we may ask about your dog (name, breed, life stage, training challenges) or your business (stage, general location, revenue band, goals) and how you heard about us. All of this is optional and skippable.

Learning activity. Which lessons you complete, quiz attempts and scores, and certificates you earn. Certificates carry your name and a serial number so employers can verify them at your request.

Payment details. Payments are processed by Stripe. Your card number never touches our servers — we store only what we need to manage your purchase (what you bought, when, and the payment reference).

Messages. If you use “Ask a trainer”, book a session, or email us, we keep the conversation so we can help you.

Email address for the free guide. If you request a free guide or use the free workshop, we collect the email you enter.

Basic usage analytics. We use privacy-friendly, cookieless analytics (Vercel Analytics) to count visits and see which pages are used. It does not track you across sites or build a profile of you.

• Providing the courses, quizzes, certificates, and features you signed up for.
• Processing purchases, refunds, and subscriptions.
• Sending service emails you’d expect: receipts, sign-in links, password resets, certificates, and course updates.
• Sending marketing emails only if you opted in (for example when requesting the free guide) — every one has an unsubscribe link that works immediately.
• Improving the academy, using aggregate (not individual) analytics.
• Meeting legal obligations (tax, accounting, fraud prevention).

We do not sell your personal information, and we never have.

Only the service providers that run the academy, and only what they need to do their job:

• Stripe — payment processing (your card details go directly to Stripe).
• Resend and Loops — sending our transactional and marketing email.
• Vercel (hosting) and Neon (database) — running the site; data is stored in the United States.
• Google — only if you choose “Continue with Google” to sign in.

We may also disclose information if the law requires it. If the business is ever sold or merged, your data would transfer with it under this same policy.

Your account and learning records are kept while your account exists — course access and certificates are lifetime, so we keep the records that back them. Purchase records are kept as long as tax law requires. Free-guide emails are kept until you unsubscribe or ask us to delete them. If you delete your account, we remove your personal information within 30 days except what we must keep by law.

Wherever you live, we honor these for everyone: you can ask us to access, correct, export, or delete the personal information we hold about you, and you can object to or restrict our use of it. California residents have these rights under the CCPA/CPRA; EU/UK residents have them under the GDPR (our lawful bases are contract, consent for marketing, and legitimate interest for security and analytics — and you may complain to your local supervisory authority).

To use any of these rights, email hello@topdogsfacademy.com from the address on your account. We respond within 30 days and will never discriminate against you for asking.

Marketing: unsubscribe from any marketing email with one click, or email us. Service emails (receipts, password resets) are sent as long as you have an account, because the account doesn’t work without them.

We use only essential cookies — the session cookie that keeps you signed in and a security (CSRF) cookie. No advertising cookies, no third-party trackers. Our analytics are cookieless. That’s why you don’t see a cookie banner here.

All traffic is encrypted (HTTPS). Passwords are hashed with bcrypt. Access to production data is limited to the people who run the academy, and staff actions on accounts are logged. No system is perfect — if a breach ever affects your data, we will tell you promptly.

The academy is for adults. We don’t knowingly collect personal information from anyone under 16 — if you believe a child has created an account, contact us and we’ll delete it.

If we make a material change, we’ll update the date above and, for significant changes, email account holders. Continued use after a change means you accept the updated policy.