Privacy Policy
How we handle your data.
This is a placeholder policy for development. Replace with
a legally-reviewed policy before launch.
What we collect
- Account data: email, username, hashed password.
- Profile data: bio, links, categories, media-kit content you add.
- Connected platforms: usernames, profile URLs, follower counts and OAuth tokens (tokens are stored encrypted).
- Analytics: profile views, link clicks and shares. Visitor IP + user-agent are hashed for de-duplication — we don't store them in raw form.
How we use it
To operate your public profile and media kit, verify platform ownership, show you analytics, power discovery, and send transactional emails (confirmation, password reset, inquiries).
We send transactional email (account confirmation, password reset, contact/inquiry messages). We don't sell your data.
Your choices
You can edit or delete your profile and disconnect platforms at any time. Deleting your account removes your associated data.
Security
Passwords are hashed, OAuth tokens are encrypted at rest, uploads are re-encoded, and sensitive actions are rate-limited. No system is perfectly secure, but we take reasonable measures.
Contact
Privacy questions? Contact us.