We collect information you provide directly to us, including:

• Account details (name, email, password or auth tokens).
• Profile and page content (bio, links, media, themes, customizations).
• Support communications and feedback.
• Billing details provided to payment processors (e.g., Stripe) to process subscriptions; we do not store full payment card numbers.

When you connect third-party accounts, we receive information they provide so the Service works:

• Social/OAuth connections (e.g., YouTube, Twitch, Instagram, Facebook) such as profile IDs, basic profile data, and tokens needed to display or manage linked content.
• Email delivery and templates via providers like Resend.
• Authentication and storage services (e.g., Supabase) for account and media management.

We automatically collect:

• Device and browser data, language, and operating system.
• IP address and approximate location (city/region level).
• Pages visited, clicks, session duration, performance metrics, and diagnostics.
• Cookies and similar technologies (see Cookies & Analytics below).
• Aggregated analytics from tools such as datafa.st for usage insights.

We use data to create and manage accounts, display your profile/pages, process subscriptions and payments, provide support, and send essential notices (contract/legitimate interests).

We analyze usage to improve features, performance, and reliability; detect and prevent fraud, abuse, spam, and security incidents; and personalize experiences (legitimate interests).

We send transactional and security messages (contract/legitimate interests). We may send product updates or marketing where permitted; you can opt out of marketing at any time (consent/legitimate interests).

We share data with trusted processors that help us run the Service, including hosting/storage and auth (e.g., Supabase), payments (e.g., Stripe), email delivery (e.g., Resend), analytics (e.g., datafa.st), customer support, and security vendors. They process data under instructions and appropriate safeguards.

We may disclose data to comply with law, enforce terms, protect rights, safety, or prevent fraud/abuse, and in connection with mergers, acquisitions, or asset transfers (with notice where required).

Your information may be processed in countries other than where you reside (including Canada, the United States, and other locations of our providers). Where required, we use appropriate safeguards, such as standard contractual clauses or equivalent protections, to help ensure your data remains protected.

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, secure the Service, and understand usage. Analytics tools (e.g., datafa.st) help us see aggregated usage trends.

You can manage cookies via your browser settings. Disabling certain cookies may affect functionality. If your browser sends a Do Not Track signal, we currently do not respond to it.

We keep personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and protect our rights. When no longer needed, we delete or anonymize it. Backups and logs may persist for a limited period.

We use encryption in transit and at rest where supported, access controls, network and application security monitoring, least-privilege practices, and periodic reviews. No method of transmission or storage is 100% secure, but we work to protect your data. If we become aware of a breach that affects you, we will notify you when required by law.

You can access, update, or delete certain information in your account settings. You may request access, correction, deletion, or export by contacting us. We may need to verify your identity and will respond within a reasonable time and as required by law.

You can opt out of marketing emails by using the unsubscribe link in the message. We will still send essential transactional or security notices.

If you have questions or want to exercise your rights, contact us:

For data requests: include the request type (access, correction, deletion, export) and the email linked to your account. We may ask for verification before acting.