Privacy policy
Last updated: October 22, 2026
This policy explains which details we collect on shecreates.ai, in the SheCreates Club (our free letter) and when you message us on Instagram. We keep it short and in plain language. The Dutch version is the official one; this is a faithful translation.
Buying a course? Payment runs through the Cash Cow Academy checkout. For that purchase, the Cash Cow Academy privacy policy also applies.
Who we are
SheCreates is a brand of Cash Cow Academy B.V., Laat 3, 8309 DC Tollebeek, the Netherlands, Chamber of Commerce 84983833. We are responsible for your details. Questions or a request? Email info@cashcowacademy.nl.
What we collect, why, and on what basis
| What | Which details | What for | Legal basis |
|---|---|---|---|
| SheCreates Club | Which detailsYour email address, your first name (if you fill it in), your language, which channel you came from (for example "TikTok EN", never who you are), and the date, time and IP address of your sign-up and your confirmation. | What forSending you the letter every Sunday and telling you what opens on November 16. We keep the date, time and IP address as proof that you signed up yourself. | Legal basisYour consent (art. 6(1)(a) GDPR). You can withdraw it at any time. |
| Opens and clicks | Which detailsWhether you open a letter and which link you click. | What forSeeing which letters are useful, and removing addresses of people who never open a letter anymore. That keeps our emails out of spam folders. | Legal basisYour consent for the Club: this measuring is part of the letter and described in this policy (art. 6(1)(a) GDPR and art. 11.7a of the Dutch Telecommunications Act). Don't want this? Unsubscribe or email us. |
| Instagram messages | Which detailsYour Instagram name and what you send or comment, such as the word CLUB or STEPIES. | What forSending you the link you ask for, and answering your questions. | Legal basisYou ask for it (art. 6(1)(b) GDPR). |
| If you reply to me | Which detailsYour email address, your name and what you write. | What forReading and answering your reply, and learning what Club members want to build. | Legal basisOur legitimate interest (art. 6(1)(f) GDPR): you send us a message yourself. |
| The website | Which detailsTechnical details such as your IP address and which device and browser you use. | What forKeeping the site fast and safe and stopping abuse, such as bots making fake sign-ups. | Legal basisOur legitimate interest (art. 6(1)(f) GDPR). |
We never sell your details and we don't use them for ads.
Who helps us
We have agreements with these companies about how they handle your details (a data processing agreement):
- Brevo (Sendinblue SAS, Paris, France) sends the Club emails and stores the list. Your details are stored in the European Union.
- Cloudflare runs the website, blocks bots and forwards email sent to club@shecreates.ai to our mailbox. Cloudflare is a US company; transfers to the US take place under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
- ManyChat (US) automatically sends you the link on Instagram when you comment or send CLUB or STEPIES. Transfers to the US take place under the European Commission's standard contractual clauses. Instagram itself belongs to Meta; Meta's privacy policy applies to what Meta does with your details.
How long we keep your details
- Club: as long as you're a member. If you unsubscribe, you get no more letters. Your address then stays on an unsubscribe list, so you never get email from us again by accident. Want us to erase that too? Email us.
- Not confirmed: if you don't tap the button in the confirmation email, we send you nothing and delete your details within 3 months.
- Instagram messages: up to 12 months after your last message.
- Replies to a letter: up to 2 years, then we delete them.
- Technical website data: briefly, only as long as needed for security.
Cookies
We don't use advertising cookies or cookies that track you. Cloudflare may set a strictly necessary security cookie to recognise bots. That does not require consent.
16 and older
The SheCreates Club is for people aged 16 and older. Younger? Please don't sign up. If we find out someone under 16 has signed up, we delete their details.
Your rights
You can see, correct or delete your details. You can object, restrict how we use them and ask for a copy to take with you. You can withdraw your consent at any time, most easily with the unsubscribe link at the bottom of every email. For anything else, email info@cashcowacademy.nl. We reply within a month.
Not happy with how we handle your details? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the authority in your own country.
Security
The site only works over a secure connection. Only people who really need it can access the list. If something does go wrong with your details, we report it to the Autoriteit Persoonsgegevens within 72 hours and, where needed, to you as well.
Changes
If we change this policy, you'll see a new date at the top. If it's something important, we'll also let Club members know by email.