Privacy Policy

1. What we collect

• Account data: email, password hash, role, verification status.
• Profile data: display name, bio, niches, links, images you upload.
• Transaction data: orders, offers, deliveries, reviews, Stripe customer and account identifiers. Card numbers are held by Stripe, never by us.
• Communications: messages, pitches, and applications (contact details are automatically masked).
• Technical data: IP address (via Cloudflare) and logs used for security and rate limiting.

2. How we use it

• Operate the marketplace: matching, messaging, orders, payouts, leaderboards.
• Payments, fraud prevention, and dispute/chargeback evidence.
• Transactional email (verification, password reset, order lifecycle). We do not sell your data.

3. Public creator pages

The directory includes pages assembled from publicly available information (name, avatar, banner, subscriber count) about creators who have not joined. Email [email protected] for correction or removal — handled promptly.

4. Processors

• Stripe — payments, payouts, identity/tax for sellers.
• Resend — transactional email delivery.
• Cloudflare — DNS, TLS, DDoS protection, and encrypted offsite backups (R2).

5. Retention and security

• Account and transaction records are retained while your account exists and as required for tax, accounting, and dispute-evidence purposes (typically 7 years for financial records).
• Data is stored on our servers with encrypted nightly offsite backups. Access to production data is restricted and audited.

6. Your rights

You can access and update profile data in settings. For export or deletion of your account and personal data, email [email protected]. We delete personal data on request except records we must keep (completed transactions, dispute evidence). Depending on where you live, you may have additional rights (e.g. access, correction, deletion, portability) under [OWNER: applicable privacy law(s), e.g. "the California Consumer Privacy Act (CCPA)" and/or "the EU/UK GDPR", if applicable to your users].

7. Cookies

We use essential cookies only: session authentication and admin session. No third-party advertising cookies.

8. Changes and contact

Material changes are announced on the Platform. Questions: [email protected].

Data controller: [OWNER: legal entity name], [OWNER: registered business address].