Privacy Policy

1. What We Collect

You Give Us:

• Email & password (encrypted) - or email only when using Google Sign-In
• Listing info (descriptions, prices, images)
• Website URL
• Inbox messages (inquiries and replies between brands and creators)
• Subscription plan selection
• Credit purchases

From Google (if you use Google Sign-In):

• Email address
• Name (optional - not stored)
• Google User ID (to link your account)

Automatically Collected:

• Usage (pages viewed, clicks)
• IP address, browser, device
• Session cookie (login)
• Bot protection data (via Cloudflare Turnstile - only for email/password login)
• Aggregate web analytics (via Cloudflare Web Analytics - cookieless, no personal data stored, page views and performance metrics only)

From Public Sources (for Third-Party Listings):

• Publicly available website information (domain, description, contact URL)

We may create listings for websites based on publicly available information. Website owners can claim or request removal of such listings.

2. How We Use Your Data

• Provide Service: Login, show listings, process payments
• Analytics: Track views, clicks, and saves to show you stats
• Subscriptions: Manage your plan, process upgrades/downgrades
• Credits: Track your credit balance and usage
• Inbox: Facilitate direct messaging between brands and creators, store conversation history and deal status
• Emails: Password resets, subscription updates, payment receipts, listing claim notifications, inbox reply notifications, weekly digest with new sponsorship opportunities (you can opt out anytime in your account settings)
• Listing Claims: Notify website owners about listings of their websites, process ownership claims and removal requests
• Security: Prevent fraud and abuse, bot protection (via Cloudflare Turnstile)

3. Who Sees Your Data

We Share With:

• Google: Only when you use Google Sign-In (email address for authentication). See Google's Privacy Policy
• Stripe: Payment processing
• Cloudflare: Bot protection via Turnstile (only for email/password login) and cookieless web analytics via Cloudflare Web Analytics (aggregate page views and performance data only - no cookies, no personal data, no individual tracking). See Cloudflare's Privacy Policy
• Hosting provider: Server infrastructure
• Email service: Transactional emails

We DO NOT sell your data

4. How Long We Keep Data

5. Your Rights (GDPR)

• Access: Request copy of your data
• Delete: Delete account from settings
• Correct: Update info in dashboard
• Export: Download your data

6. Cookies & Tracking

Internal Analytics: We track listing views, clicks, and saves using anonymous session IDs stored in the session cookie. All data stored in our database, not shared with anyone.

Cloudflare Web Analytics: We use Cloudflare Web Analytics for aggregate site usage metrics (page views, performance). This service does not use cookies, does not track individual users, and does not collect personal data. Only aggregate, anonymized data is processed. No data is shared with advertisers.

Cookie Consent: When you click "Accept" on our cookie banner, we store your preference in your browser's localStorage. This is not a cookie, but local storage on your device. You can clear it anytime via browser settings.

7. Security

• HTTPS: All traffic encrypted
• Passwords: Hashed with bcrypt (we can't see them). OAuth users can optionally set a password.
• Google Sign-In: OAuth 2.0 authentication - we never see your Google password
• Stripe: PCI compliant payment processing

No system is 100% secure. We do our best but can't guarantee absolute security.

8. Children

Service not for users under 18. If we discover a child's account, we delete it immediately.

9. Changes

We may update this policy. Check "Last Updated" date. Big changes = email notification.

10. Contact

[email protected]