Empire of Light
Last updated: June 23, 2026
Empire of Light ("Empire of Light," "we," "us," or "our") is the operating name (a registered fictitious business name) of Media Marketing Resource LLC, a California limited liability company. This Privacy Policy explains what personal information we collect through https://empireoflight.love and our related services (the "Services"), why we collect it, how we use and share it, and the choices and rights you have.
This policy is written to meet the requirements of the California Consumer Privacy Act as amended by the CPRA, the EU and UK General Data Protection Regulations, and the consumer privacy laws of every U.S. state that has enacted one. Because Empire of Light teaches a personality-adaptive program that may infer aspects of your mental or emotional state, certain information you provide is treated as consumer health data and is governed additionally by our Consumer Health Data Privacy Policy, which is incorporated into this policy by reference.
By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
Empire of Light is operated by Media Marketing Resource LLC, located in Citrus Heights, California, United States. We are the business responsible for your personal information (the "controller" under GDPR; the "business" under the CCPA).
You can reach us about privacy at any time:
If you are in the EU or UK and have a concern we have not resolved, you also have the right to lodge a complaint with your local data protection authority.
We collect the following categories of personal information.
Information you give us directly:
Information we collect automatically:
Information from third parties:
We do not collect biometric identifiers, precise geolocation, government ID numbers, or financial account numbers, and we do not knowingly process the data of anyone under 18 (see Section 11).
We use personal information to:
We do not sell your personal information, and we do not use your assessment responses or community content to train third-party advertising models.
How the teaching fits you without the system profiling you. Our teaching material is written and cited in advance. When you speak, your words are used as a lookup key to select which pre-authored passages meet the moment — not as material for building a profile of you. What is sent to the model to compose a reply is a bounded slice: your latest message, a short rolling window of the immediately preceding exchange, and the selected passages. Your name, email, account identifier, and scores are not sent — the conversational side of the system is structurally denied access to them. Your words do travel, to Google Vertex AI inside our own cloud project, to compose your reply and to score your responses; what does not travel is your identity. Full plain-language explanation: The Learner Covenant.
How your conversations are kept apart from your scoring. The Wheel is built as several separate services, each with deliberately limited access to your stored data. The scoring service has no read path to your teacher conversations or narrative memory; the teaching service cannot read your raw statistical estimates or any experimental score; the slow-analysis service cannot read your conversations. The only principal with unrestricted read access is the one that performs your own export and deletion. These restrictions are enforced in code — a violating read raises an error rather than returning data. Separately, the software refuses to store any field not declared in our public data covenant manifest: an undeclared write fails rather than saving, so we cannot quietly begin collecting something new. What your teacher remembers, your practice history, and any crisis exchange are never used to score you. Full plain-language explanation: The Learner Covenant.
The community firewall. We may make your community participation visible — what you share, how you show up, how you help others — and we may celebrate it. No measure of your community participation is ever an input to your wheel scores, your learning profile, the teaching you are shown, your pacing, or your access to anything. Your growth is private; your generosity can be seen; the two never touch. This is enforced in our systems, not merely intended. See Promise 1 of the Learner Covenant.
Where the GDPR or UK GDPR applies, we rely on these legal bases:
We share personal information only as described here:
| Processor | What it does | What it receives |
|---|---|---|
| Google Cloud — Vertex AI | Scores your assessment and generates your reading and your teacher's responses (model: Gemini 2.5 Flash) | Your assessment responses and your conversations with your teacher |
| Google Cloud — Firestore / Cloud Run | Stores and serves your learner record | Your account and learning data |
| GoHighLevel | CRM, account, community, hosting, cookie-consent management | Contact and account information, community content |
| Stripe | Payment processing | Payment and billing information |
| Cloudflare | Content delivery and edge security | Technical request data |
| Google Analytics 4 | Website analytics | Usage and device data — not your assessment responses |
| OpenRouter | Generates our marketing imagery and website copy | Nothing about you. It receives content-generation prompts only, and never your assessment responses, conversations, or community content. |
About the AI that reads your answers. Vertex AI runs inside our own Google Cloud project, in the United States, authenticated without a shared API key. Under Google Cloud's processor terms, your content is not used to train Google's models. If we ever change which model or provider processes your data, we update this section and the Learner Covenant in the same change. - Legal and safety — when required by law, to respond to lawful requests, or to protect the rights, safety, and property of any person. - Business transfers — if Empire of Light or Media Marketing Resource LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We state this plainly because it is how acquisitions work and we will not pretend otherwise. Three commitments apply if it ever happens: the Learner Covenant transfers with the data and continues to bind whoever holds it; we will notify you before the transfer takes effect; and you will have the opportunity to export and delete your information first. We have no such plans. A business transfer is not a sale of your data to advertisers or brokers — that we will never do.
We do not sell or "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA.
Beyond what the law requires. The rights in Section 8 vary by where you live. The Learner Covenant extends them to every learner, everywhere, regardless of jurisdiction — anyone may request export or full erasure, and we honor it. Where Section 8 and the Covenant differ, the Covenant governs.
How to exercise them today, stated plainly. For erasure, you can start the request yourself with the Request-erasure button on your Personal Data & Rights page — we verify it against your registered address with a single-use link, a person completes it, and we write to you when it is done. You can also simply email email us from your registered address, for erasure or export alike. Our commitment is 30 days, we aim for 48 hours. Export does not yet have a self-serve button — a person runs it for you. We will not describe a control as available before it is. Erasure is a real deletion, not a hidden flag, and covers your learner record, your CRM contact, and your community account. Payment records held by our payment processor are retained as long as tax and accounting law requires.
One limit worth naming: for a few internal categories — the raw statistical estimates the engine uses and our own housekeeping — an export returns the list of what is held rather than the raw values, because those numbers are meaningless outside the math that produces them. Everything readable about you is returned in full.
We keep personal information only as long as needed for the purposes above:
| Category | Retention |
|---|---|
| Financial and transaction records | 7 years (tax and legal) |
| CRM / account data (inactive accounts) | 3 years after last activity |
| Analytics data | 90 days at the individual level |
| Data-subject-request records | 24 months |
| Assessment responses and results | While your account is active, or until you delete them; you may export or delete at any time |
When data is no longer needed, we delete or de-identify it.
We use encryption in transit and at rest, access controls limiting personal data to authorized roles, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.
Depending on where you live, you may have the right to:
How to exercise your rights: email email us with your request. We will verify your identity (usually by confirming control of your account email) and respond within the timeframe the law requires — generally 45 days under the CCPA (extendable once by 45 days) and one month under the GDPR. You may use an authorized agent; we will ask for proof of authorization.
Global Privacy Control (GPC): we honor browser-based opt-out signals such as the Global Privacy Control. When we detect a GPC signal, we treat it as a valid request to opt out of sale/sharing and targeted advertising for that browser.
California "notice at collection": the categories of personal information we collect, our purposes, and our retention periods are described in Sections 2, 3, and 6. We do not sell or share personal information and do not use sensitive personal information beyond providing and improving the Services.
The Know Yourself Quiz and our deeper assessment may infer aspects of your mental or emotional state in order to teach you in the way you learn best. Information that reveals or infers mental or emotional state is treated as sensitive personal information under the CCPA and as consumer health data under Washington's My Health My Data Act and similar laws.
We use this information only to provide and improve the Services for you, never to discriminate, and never for advertising. Our specific commitments, your separate consent, and additional rights for this category are set out in our Consumer Health Data Privacy Policy, which is part of this policy.
We are based in the United States, and our service providers are primarily located in the United States. If you access the Services from the EU, the UK, or another region with data-transfer rules, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses (and, where applicable, the EU-U.S. Data Privacy Framework) to protect your information during transfer. You may request information about these safeguards using the contact details above.
The Services are intended for adults 18 years of age and older. We do not direct the Services to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at email us and we will delete it.
We may update this Privacy Policy as our Services or the law change. When we make a material change, we will update the "Last updated" date above and, where appropriate, give you additional notice. Your continued use of the Services after an update means you accept the revised policy.
Empire of Light is a registered fictitious business name of Media Marketing Resource LLC, Citrus Heights, California. This document is provided for transparency and is not legal advice.
Questions? Reach us at email us. Empire of Light is a registered fictitious business name of Media Marketing Resource LLC, Citrus Heights, California.