Threshold15
Privacy Policy
Effective November 7, 2026
Threshold15 runs websites, booking, and checkout for training schools and independent instructors. We collect what a school needs to take bookings and keep its records, use it to run the Services, and do not sell it or use it for advertising. The details follow.
1. Who we are and what this policy covers
Threshold15 is operated by Practical Rifle Academy LLC, a Florida limited liability company (“Threshold15”, “we”, “us”). This policy explains how we collect, use, share, and protect personal information when you visit threshold15.com, open or run a school on Threshold15, or visit, sign up, book, buy, or sign a waiver on a school’s site. Words like School, School Site, Staff, and Student mean what they mean in our Terms of Use.
This policy does not cover what a School does with information outside Threshold15, or other companies’ sites and services we link to, such as Stripe’s payment pages or YouTube.
2. Schools control their Students’ information
When you use a School Site, the School decides what information it collects about you and how it uses it. For that information, the School is in charge (the “controller” or “business” under privacy laws), and we are its service provider: we handle the information on the School’s behalf, following its instructions and our Terms of Use. The School’s own privacy notice also applies. Questions about how a School uses your information, and requests to see, correct, or delete it, should go to the School first. If you contact us instead, we will pass your request to the School and help it respond.
We are in charge of information about School owners and Staff accounts, Schools’ billing, visitors to threshold15.com, and the information we use to run and secure the Services.
Practical Rifle Academy LLC also runs its own school, Practical Rifle Academy, on Threshold15. That school receives its own Students’ information like any other School. It does not receive, and we do not use for it, the information of other Schools’ Students.
3. Information we collect
Information you give us, or a School collects through the Services
- Account details: name, email address, password (stored only as a one-way hash, never as readable text), role (owner, admin, instructor, or student), and which version of our Terms of Use you agreed to and when.
- School owners and Staff: the school’s name, web address, and time zone, and the content you add, such as courses, prices, schedules, venues and their addresses, instructor names, bios and photos, policies, waiver text, images, and documents. Affiliate names, email addresses, codes, and commissions. The ID of your connected Stripe account and whether it can take payments.
- Students: name and legal name, email address, phone number, date of birth, mailing address, and emergency contact name and phone. Your bookings and purchases, session-pack credits, attendance and no-show marks, cancellations and refunds, any affiliate code you used, and a history of changes to your profile.
- Waiver signatures: the name and initials you sign with, the details above as you entered them, the exact waiver text, the date and time, your IP address and browser, and a fingerprint (cryptographic hash) of the signed record. These show what was signed, when, and by whom.
- Messages: what you send through a School’s contact form (name, email address, phone number, the kind of question, and your message) goes to that School by email. We also keep what you send us.
- Waitlists: when you join a class’s waitlist, we keep your name, email address, phone number, and when you joined, so the School can see who is waiting and we can email you once when the class has a date you can book.
- Email choices: whether you agreed to emails about new class dates from each School, when and how you last changed that, and which of these emails were sent to you.
- Payments: you enter card details on Stripe’s pages, not ours, and we never see or store full card numbers. Stripe tells us things like a payment’s amount, status, and reference numbers, and, for a School’s own plan, its subscription status and invoices.
Information collected automatically
- Logs: when you use the Services, our servers receive your IP address, browser type, the pages you ask for, the page you came from, and the date and time. We use them to run, secure, and fix the Services, and to stop abuse, for example by limiting repeated sign-in attempts.
- Cookies: a few, all needed to run the Services. See Cookies.
- Usage events: we record business events, such as “a booking was made”, “a sign-in failed”, or “an email could not be sent”, with the School they belong to but without names, email addresses, or other details that identify a person. We use them to measure and improve the Services and to spot failures.
Information from others
We receive payment and account status from Stripe, information a School enters about you (for example when it adds you as Staff or books you into a class), and delivery problems from our email provider.
5. How we use information
- To provide the Services: School Sites, accounts, bookings, rosters, payments and refunds, waivers, and the emails that go with them, such as sign-in codes, receipts, class reminders, signed waiver copies, and trial and billing notices.
- To keep the Services secure: confirming email addresses, emailing sign-in codes to Staff, limiting repeated attempts, and detecting and investigating abuse.
- To bill Schools for their plans and seats.
- To support and inform you: answering questions and telling you about changes to the Services, our Terms, or this policy.
- To improve the Services, mostly from usage events and information that is combined or stripped of anything that identifies a person.
- To meet legal obligations, enforce our Terms, and protect the rights, property, and safety of our users, the public, and us.
We do not sell personal information, share it for targeted advertising, or use it for profiling that has legal or similarly significant effects. We do not use Students’ information to market our own services or Practical Rifle Academy.
7. How long we keep information
- School Data is kept while the School has an account. When a School is removed, we delete its data from our database and file storage, including its Students’ bookings and waivers, and the accounts of Students who belonged only to that School. Accounts that also belong to another School stay for that School.
- A School whose free trial ends without a card is deleted 7 days after the trial ends. After a paid plan ends, we may delete the School’s data any time from 30 days later, and sooner if the School asks. Schools should download any records they need to keep, such as signed waivers.
- When a Student asks to be deleted, we act on the School’s instructions, because the School may need to keep waivers and booking records for legal reasons.
- A waitlist entry is kept until we email you about a date, then deleted 12 months later. The School can remove it sooner.
- Sign-in codes expire after 10 minutes, and sign-in sessions after 30 days.
- Usage events are deleted after 13 months. They do not identify people and may outlast a removed School.
- Server logs are kept for a limited time for security and troubleshooting.
- Copies of deleted information can remain in backups for a limited time, until those backups expire.
- Stripe keeps payment and invoice records under its own policies, and we keep records of a School’s billing as long as tax, accounting, or other laws require.
8. Security
We protect information with encryption in transit (HTTPS) and at rest, passwords stored only as hashes, sign-in codes emailed to Staff, private file storage that is reached only through our app, keeping each School’s data separate in every database query, and limiting access to production systems to the people who run the Services.
No system is perfectly secure, and we cannot guarantee the security of your information. Use a strong password that you do not use anywhere else. If a breach affects your personal information, we will notify you, the affected School, or both, and the authorities, as the law requires. To report a security problem, write to support@threshold15.com.
9. Your choices
- Your details: Students can update their profile in their account on the School Site, and Schools in Admin.
- Emails: sign-in codes, receipts, reminders, waiver copies, and billing notices are part of the Services, so you cannot opt out of them while you have an account. A School may email Students who have booked with it about new class dates; each of these emails has a one-click unsubscribe link, and Students can turn them off or on in their account on the School Site. Any optional news we send Schools includes a way to unsubscribe.
- Closing an account: Students can ask the School, or us at support@threshold15.com. Schools can ask us to remove the School and its data.
- Cookies: through your browser’s settings, as described in Cookies.
10. U.S. state privacy rights
Depending on where you live, including California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia, and other states with privacy laws, you may have the right to:
- know what personal information we hold about you and get a copy, in a portable format;
- correct inaccurate information;
- delete your information;
- opt out of the sale of your information, targeted advertising, and certain profiling, none of which we do; and
- not be treated differently for using these rights.
To make a request, email support@threshold15.com with the subject “Privacy request”, from the email address on your account if you have one. We confirm your identity by checking that you control that address, and may ask for more information if needed. Someone you authorize can make a request for you with your signed permission. We respond within the time the law sets. If we turn down your request, you can appeal by replying to our answer with the word “Appeal”; if you are still not satisfied, you can contact your state attorney general. Where we hold the information for a School, we pass the request to the School and help it respond.
California. In the past 12 months we have collected these categories of personal information: identifiers (such as name, email address, and IP address); customer records (such as phone number, mailing address, and emergency contact); age (date of birth); commercial information (bookings and purchases); internet activity (logs); professional information (instructor bios); and account login details. We collect them from you, from Schools, and from Stripe, for the purposes in How we use information, and disclose them only to the parties in How we share information. We use login details only to run your account. We have not sold or shared personal information for targeted advertising, and we do not share it with others for their own direct marketing.
11. Children
The Services are not directed to children under 13, and we do not knowingly collect their personal information. You must be 18 or older to create an account. If we learn that we collected information from a child under 13 without a parent’s consent, we delete it. A parent who believes this has happened can contact us at support@threshold15.com. Schools that train minors are responsible for getting a parent’s or guardian’s consent.
12. Where we store information
We store information in the United States, on Oracle Cloud Infrastructure’s US East region. Our other service providers may process it in the United States and elsewhere. The Services are meant for people in the United States; if you use them from another country, your information is transferred to and handled in the United States.
13. Changes to this policy
We may update this policy. We will post the new version here with a new effective date, and if a change is material, we will tell Schools by email before it takes effect.
14. Contact us
Questions about this policy or your information go to Practical Rifle Academy LLC, which operates Threshold15, at support@threshold15.com, with the subject “Privacy”.