Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how [COMPANY LEGAL NAME] ("[PLATFORM NAME]," "we," "us," or "our") collects, uses, and discloses personal information when you use [SITE URL] and its related services (the "Platform"). It also describes the choices and rights you have. By using the Platform you agree to this Policy. If you do not agree, do not use the Platform.
This Policy is written to meet the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA/CPRA") and comparable privacy laws in other US states. Where a specific state gives you additional rights, we honor them.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not use third-party advertising or analytics tracking pixels on the Platform. If this ever changes, we will update this Policy and provide the opt-out mechanisms the law requires before doing so.
We collect the following categories of personal information, using the categories named in the CCPA/CPRA:
We do not intentionally collect "sensitive personal information" as defined by the CCPA/CPRA (such as government identifiers, precise geolocation, or account log-in combined with a password for another account). Please do not submit sensitive information in reviews or messages.
We collect information directly from you (when you register, build a profile, submit a review, or apply to a program), automatically as you use the Platform (activity and device information), and from service providers who help us operate the Platform (for example, our email-delivery provider confirming whether a message was delivered).
We disclose personal information only as follows:
In the preceding 12 months we have disclosed the categories in Section 2 to service providers for the operational purposes described above. We have not sold personal information and have not shared it for cross-context behavioral advertising.
We use a small number of cookies that are necessary for the Platform to function and to remember your preferences, including your cookie choice. We do not use third-party advertising cookies. For details, see our Cookie Policy.
We keep each category of personal information only as long as reasonably necessary for the purposes described in this Policy, and then delete or de-identify it, unless a longer period is required or permitted by law (for example, to meet tax and accounting obligations, to resolve disputes, or to enforce our agreements). The schedule below states the periods we apply. Where a fixed period cannot be given in advance, we retain the information for the criterion described and delete or de-identify it once that purpose is met.
| Type of information | How long we keep it |
|---|---|
| Account and profile information (name, email, hashed password, email-verification status) | While your account is open; deleted or de-identified within 90 days after the account is closed, except records we must keep longer under this schedule. During those 90 days you can reopen the account yourself and nothing is deleted; after them, the deletion is permanent and cannot be reversed. |
| Seller or reviewer program information (a seller's business details; a reviewer's demographic and interest information) | While you participate in the program, and up to 24 months afterward to handle disputes and prevent fraud, then deleted or de-identified. |
| Consent records (the document version you agreed to, the date and time, and IP address) | For the life of your account plus 4 years, to evidence your agreement and cover the period in which a related claim could be brought. |
| Reviews, ratings, photos, and videos you publish | Remain available after you close your account, consistent with FTC guidance against selectively removing reviews. Your name is removed from them as soon as the account closes, and the link between the review and your account is severed permanently when the profile is deleted at 90 days. You do not need to ask for this. |
| Activity and outbound-click logs (IP address, user agent, session identifier, and the links you click to visit external retailers) | Up to 12 months in identifiable form, then anonymized (IP and session identifiers removed) or deleted. |
| Fraud-prevention signals (for example, IP addresses blocked for abusive clicking) | Up to 24 months. |
| Billing and financial records (advertising and click-fee charges, invoices, and account ledgers) | Up to 7 years, to meet tax, accounting, and audit obligations. |
| Email-verification and rate-limit records | Transient; removed automatically within 24 hours. |
| Email delivery logs | Up to 12 months, for deliverability and security. |
| Messages you send us through the Contact page | Up to 24 months, so we can answer you and follow up on your request. |
| Privacy-request records (to show we handled your request) | At least 24 months, as required by law. |
| Marketing opt-out / unsubscribe records | Kept, in minimized form, for as long as needed to honor your opt-out under the CAN-SPAM Act, even after your account is closed. |
When a retention period ends, we delete the information or remove the identifiers that link it to you. Some information may persist for a limited time in secure backups before it is overwritten on our normal backup cycle.
We use administrative, technical, and physical safeguards designed to protect personal information, including hashing of passwords and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
Depending on where you live, you may have the right to:
Closing your account. You do not need to contact us to close your account. Sign in and use Close my account in your account settings; we will confirm by email. Closing is refused only while something is still unsettled between you and another user or us - an open reviewer offer, a refund owed in either direction, an unfinished campaign, a dispute, or an unpaid or unrefunded balance - and the page tells you which of these applies. For 90 days afterwards you can restore the account by signing in as usual; we then email you a link to confirm it is you. If we closed your account rather than you, contact us instead. After 90 days your profile is deleted on the schedule in Section 7.
You may submit a request by emailing [PRIVACY EMAIL]. We will verify your request by confirming information associated with your account before acting on it, and we will respond within the timeframe required by law. You may use an authorized agent to submit a request on your behalf, with proof of authorization. If we decline your request, we will explain why, and where your state allows, you may appeal by replying to our response.
We send transactional messages (such as email verification and account or security notices) that are necessary to provide the Platform. If we send promotional email, you can opt out at any time using the unsubscribe link in the message or by contacting us; we handle promotional email consistent with the CAN-SPAM Act. Opting out of promotional email does not stop transactional messages.
The Platform is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at [PRIVACY EMAIL] and we will delete it.
[If the operating entity or its service providers process personal information outside the United States, retain this paragraph; if all processing is in the US, it may be deleted.] Your personal information may be processed in, or transferred to, countries outside the United States, including the country where [COMPANY LEGAL NAME] is established. Those countries may have different data-protection laws. Where we transfer information internationally, we take steps to protect it consistent with this Policy and applicable law.
We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, where required, notify you. Your continued use of the Platform after an update means you accept the revised Policy.
For privacy questions or requests:
[COMPANY LEGAL NAME]
[MAILING ADDRESS]
[PRIVACY EMAIL]