Privacy Policy

The data controller is [Registered legal entity name], [Registered business address]. Privacy requests: [email protected].

• Account data: name, email address, and a hashed password (we never store your password in plain text).
• Profile and content: the bio pages, links, products, courses, bookings, email lists, messages and media you add.
• Payment data: handled by Cashfree. We receive order, subscription and limited transaction details, but not your full card number.
• Usage and analytics: first-party page-view and click events (a visitor identifier, pages viewed, referrers) stored in our own database and shown to you as analytics.
• Technical data: IP address, device and browser information, and cookies (see the Cookie Policy).
• Support data: messages you send to us and tickets you raise.

• to provide, operate, secure and improve the service;
• to create and manage your account and process payments and subscriptions;
• to send transactional email (such as password resets and receipts) and, where you opt in, marketing;
• to provide analytics about your pages and audience;
• to detect, prevent and address fraud, abuse and security issues; and
• to comply with legal, tax and accounting obligations.

Where UK or EU GDPR applies, we rely on: performance of a contract (to provide the service), legitimate interests (security, fraud prevention, analytics and service improvement), consent (non-essential cookies and marketing), and legal obligation (tax and accounting). Where the CCPA/CPRA applies to California residents, the categories and purposes above describe our processing, and we do not sell personal data.

We share data with processors that help us run the service, currently including Cloudflare (hosting/CDN and security), Cashfree (payments) and Brevo (transactional email), and with authorities where we are legally required to do so. We do not sell personal data.

Some processors may store or process data outside England and Wales. Where that happens, we rely on appropriate safeguards such as the UK Addendum, the EU Standard Contractual Clauses, or an equivalent mechanism.

We keep personal data while your account is active and for a reasonable period afterwards to meet legal, tax, accounting and security needs. When it is no longer needed, we delete or anonymise it. If you delete your account, we will remove or anonymise your personal data except where we must keep it by law.

Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to our processing of your personal data, and to withdraw consent at any time. We offer account export and deletion from your settings. To make a request, contact [email protected]. UK/EU users may also complain to their local supervisory authority.

We use cookies as described in our Cookie Policy.

We use industry-standard measures including encrypted transport (TLS), hashed passwords and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The service is not directed to children below the minimum age at which they can consent to data processing in their jurisdiction. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy; material changes will be notified before they take effect. For any privacy question or request, contact [email protected] or [email protected].