Legal

Privacy Policy

Last updated: September 2026

1. What We Collect

We collect only what is necessary to operate the platform:

  • Email address — used to authenticate publishers via magic link and to send purchase receipts to buyers.
  • Payment data — processed by Stripe. We never see or store your card number, CVV, or full card details.
  • Uploaded files — prompt files uploaded by publishers are stored in S3 and used to generate offer pages and buyer delivery ZIPs. They are not shared with third parties.
  • Usage data — basic server logs (IP address, page views, offer view counts) for security and platform health. We do not use third-party analytics trackers.

2. How We Use It

  • To authenticate you and manage your account
  • To process payments and deliver purchases
  • To generate AI-assisted offer copy from your uploaded files (via Amazon Bedrock — your content is not used to train models)
  • To send transactional emails (magic links, purchase receipts, payout notifications)
  • To maintain platform security and investigate abuse

3. What We Don't Do

  • We do not sell your data to third parties
  • We do not use your data for advertising
  • We do not share your uploaded content with other users or publishers
  • We do not retain email addresses beyond what is needed to operate your account

4. Third-Party Services

We use the following sub-processors:

  • Stripe — payment processing (stripe.com/privacy)
  • Amazon Web Services — hosting, storage, email delivery (SES), and AI inference (Bedrock)
  • Wise — publisher payouts

5. Data Retention

Publisher accounts and uploaded files are retained while your account is active. Buyer email addresses are retained for the duration needed to deliver purchases and handle support queries. You may request deletion of your data at any time by contacting us.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorised operators. We follow AWS security best practices for IAM, secrets management, and network isolation.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, reach us via our contact page. We will respond within 30 days.

8. Changes

We may update this policy as the platform evolves. Material changes will be communicated by email to registered publishers.

9. Contact

Privacy questions? Contact us.