Sheet A5Privacy
What we keep, and why.
DRAFT FOR LEGAL REVIEW · NOT YET IN FORCE · LAST EDITED JUL 2026
What we collect
Your email (it is how you sign in), your display name and profile, the plans you buy and publish, and the usual operational logs. Passwordless sign-in means we never store a password.
What we do with it
- Send sign-in codes and receipts. No marketing without an explicit opt-in.
- Process payments through Stripe; card numbers never touch our servers.
- Show creators aggregate sales analytics, never buyer identities without consent.
What we never do
No selling personal data. No third-party ad trackers on authenticated pages.
Where it lives
Data is stored in Canada (Azure Canada Central). Email delivery and payment processing involve US-based processors (Resend, Stripe) under their respective data agreements.
Your controls
Export or delete your account from settings, or write to [email protected]. Deletion removes personal data; published plans can be transferred or retired first.