Privacy Policy

the platform("we", "us") operates a platform where creators and influencers curate affiliate product deals for their audiences. Storefronts are hosted on a creator page or a custom domain owned by the creator. This policy describes what we collect, why, and how to control it. The creator whose page you visited is independently responsible for content they publish, but the data handling described here applies uniformly.

• You give us: email address (when you subscribe), and any messages you send through the in-page chat or email replies.
• Automatic: IP address, browser/device info, referring URL, page views, click events on deal links, and email opens/clicks (via tracking pixels in our outbound emails).
• From partners: commission and conversion data from affiliate networks (e.g. AvantLink) so creators can see which links converted.
• Cookies / local storage: session cookies for login, opt-in state, and basic analytics. We do not sell ad-targeting profiles.

• Send deal updates from creators you have subscribed to.
• Generate AI-assisted email replies from the creator's persona when you ask product questions. The creator's configured AI assistant has access to your message thread to answer in context.
• Attribute clicks and commissions so creators get paid correctly.
• Detect abuse, fraud, and bot traffic.
• Improve recommendations and product surfacing.

Most product links on this platform are affiliate links. When you click and complete a purchase, the underlying retailer pays a commission that is split between the creator and the platform. The price you pay is unchanged. See the FTC Disclosure for details.

• Creators: if you subscribe to a creator, that creator can see your email, subscription date, deal click history, and message thread on their account.
• Service providers: Amazon SES (transactional & outbound email), Resend (email), Stripe (payments), AvantLink and other affiliate networks (commission tracking), AWS (hosting), and AI providers (OpenAI / Anthropic, used to draft replies). These vendors process data on our behalf under contract.
• Legal: when required by law, subpoena, or to protect rights and safety.

We do not sell your personal data.

• Unsubscribe: click the link in any email or reply "STOP" to opt out of future emails from a creator.
• Access & deletion: email [email protected] to request a copy of your data or delete your account. We respond within 30 days.
• EU/UK (GDPR): you have rights of access, rectification, erasure, restriction, portability, and objection. The legal bases we rely on are consent (subscriptions), legitimate interest (fraud prevention, analytics), and contract (delivering the service).
• California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising. We do not engage in such sharing.

We retain account and subscription data while your account is active and for up to 24 months after deletion for backup, fraud, and tax compliance. Click and email logs are kept for up to 18 months for attribution and analytics.

Data is encrypted in transit (TLS) and at rest where supported by our cloud providers. Access is restricted to staff who need it. No system is impenetrable; we will notify affected users if a breach involves personal data, in line with applicable law.

The platform is not directed to children under 13 and we do not knowingly collect their data.

We will update the "last updated" date when this policy changes materially. Continued use after the change constitutes acceptance.

Questions or requests: [email protected]