Sheet A5Privacy

What we keep, and why.

DRAFT FOR LEGAL REVIEW · NOT YET IN FORCE · LAST EDITED JUL 2026

What we collect

Your email (it is how you sign in), your display name and profile, the plans you buy and publish, and the usual operational logs. Passwordless sign-in means we never store a password.

What we do with it

  • Send sign-in codes and receipts. No marketing without an explicit opt-in.
  • Process payments through Stripe; card numbers never touch our servers.
  • Show creators aggregate sales analytics, never buyer identities without consent.

What we never do

No selling personal data. No third-party ad trackers on authenticated pages.

Where it lives

Data is stored in Canada (Azure Canada Central). Email delivery and payment processing involve US-based processors (Resend, Stripe) under their respective data agreements.

Your controls

Export or delete your account from settings, or write to [email protected]. Deletion removes personal data; published plans can be transferred or retired first.