Data we process
Account identity and authentication metadata; promoter shop and listing content; subscription and payment metadata; commission-import results; support/CRM messages; security and audit events; and privacy-preserving aggregate analytics. Passwords, recovery codes, and authenticator secrets are stored only in protected derived or encrypted forms.
Why we process it
To provide accounts and storefronts, secure sign-in, operate subscriptions and payments, measure marketplace performance, prevent abuse, communicate about the service, satisfy requests, maintain auditability, and establish or defend legitimate claims.
Service providers
Depending on enabled features, processors or independent service providers may include Render for application/database hosting, Cloudinary for image storage, PayMongo for subscription payments, configured email delivery providers, and Google/GitHub/Facebook when you choose social sign-in.
Retention
Security grants and raw operational analytics are minimized on a schedule. Resolved privacy-request records are retained for a bounded period. Transaction, billing, security, and audit evidence may be retained longer where necessary for contractual, legal, fraud-prevention, accounting, or claims purposes. Backups age out under the documented disaster-recovery schedule.