Privacy Notice

Aspire Investment Group Inc., dba FFL Elite operates FFL Elite and is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with, and the rights you have.

1. Personal data we collect

• Account data — name, email address and login credentials, used to create and secure your account.
• Licensing profile — business or trade name, street address, city, county, state, ZIP, phone number, licence type and SOT class. We collect this to tailor your state and county guidance and to pre-fill your ATF forms and letters.
• Course and form data — lesson progress, saved form drafts, mock interview answers and SOT enrolment status, used to deliver the training and generate your documents.
• AI companion messages — the questions you ask and the replies you receive, so your conversations persist and the assistant can reference your context.
• Support messages — anything you send us, used to answer you.
• Technical data — IP address, device and browser identifiers and usage telemetry, used for security, fraud prevention and improving the product.

Payment card details are collected and processed by Stripe, our payment processor, not by us. We never see or store your card number.

2. Legal bases

We process account, licensing profile, course and companion data to perform our contract with you. We rely on legitimate interests for security, fraud prevention, service improvement and analytics; on consent for optional marketing email; and on legal obligation where tax or law enforcement requirements apply.

3. Who we share data with

• Service providers and subprocessors — cloud hosting, database, email delivery, AI model providers (which process your companion prompts to generate replies) and analytics tooling, all bound to process data only on our instructions.
• Stripe — our payment processor, for checkout, subscription management, tax calculation, invoicing and fraud prevention.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law or valid legal process.

We do not submit anything to the ATF on your behalf and we do not sell your personal data. Forms you generate are downloaded or printed by you and filed by you.

4. Retention

We keep your account, profile and form data for as long as your account is active, and for up to 24 months after closure so you can return mid-application, unless you ask us to delete it sooner. Tax and transaction records are kept for the period required by law. Data no longer needed is deleted or anonymised.

5. Your rights

Depending on where you live you may have the right to access, correct, delete, port or restrict your personal data, to object to certain processing, to withdraw consent, and to opt out of sale or sharing (we do not sell or share for cross-context behavioural advertising). Contact FFLEliteadmin@gmail.com and we will respond within the time the law requires — within one month for UK/EEA requests. You may also complain to your supervisory authority. If data is transferred outside the UK/EEA we use appropriate safeguards such as Standard Contractual Clauses.

6. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls that restrict each record to its owner, and least-privilege administrative access.

7. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember your preferences, plus limited analytics to understand how the training is used. You can clear or block cookies in your browser, but the Service will not work correctly without the essential ones. We do not use advertising cookies.

8. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from children.