Legal

Privacy Policy

Effective September 17, 2026

1. What we collect

• Account: email, password hash (never the password itself), Google account ID and photo if you sign in with Google.
• Store: the name, bio, links, photo and content you add to your store, plus your onboarding answers (for example niche, goal and preferred channels).
• Money: ledger entries (deposits, purchases, commissions, withdrawals), payment invoice references and the wallet addresses you enter for withdrawals.
• Referrals: who invited you and the members who joined through your link.
• Activity: challenge progress, daily tasks, store visits and link clicks (counted, not tied to visitor identities), support messages.
• Device and security: a random device key stored in your browser, the country from our network provider, and push-notification subscriptions if you allow them. We do not store visitors' IP addresses in our database.

2. Why we use it

To run your account and store, process payments and withdrawals, calculate commissions, prevent fraud and self-referral, send notifications you turned on, answer support requests, and improve the product with aggregated statistics.

3. Who processes it

• Cloudflare — website delivery and security.
• Bitcart (self-hosted) — creating crypto payment addresses and confirming payments.
• Google — sign-in, only if you choose it.
• Anthropic — AI rewrites of posts, only when you tap the button; we send your public store name and the post text, not your email.
• Resend — password-reset emails.
• Browser push services (Google, Apple, Mozilla) — delivering notifications you allowed.

We do not sell personal data.

4. Public information

Your store page, its name, photo and content are public. If you turn on the earnings badge, people you invite see a rounded range (for example "more than $100"), never the exact amount.

5. Keeping and deleting data

We keep account data while your account exists. Ledger and payment records are kept as long as needed for accounting, fraud prevention and legal duties. To close your account or ask for a copy or correction of your data, message us from Studio → Account → Help & support.

6. Security

Passwords are stored as salted hashes, reset links are single-use and expire after 30 minutes, and changing your password signs out other devices.

7. Changes

We may update this policy; the effective date above changes when we do.