Privacy policy

1. What we collect

Account data: your email address and, if you use Google sign in, the identifier Google provides. Passwords are handled by our authentication provider (Supabase) and never stored by us in plain text.

Profile data you enter: handle, display name, bio, category, country, website, and an optional public contact email.

Connected account data read through Post for Me: platform, username, platform user id, profile photo, and public post statistics (views, post dates). We never receive or store your platform password. Access tokens issued by the platform are held by Post for Me; we discard them immediately when they appear in an API response.

Public follower counts looked up through ScrapeCreators using your verified username.

Sponsor data: company name, website URL, logo, and payment records from Dodo Payments (we store the payment id, never card details).

Technical data: a salted hash of your IP address for rate limiting (kept for one day), and Cloudflare Turnstile results.

2. How we use it

To show the public leaderboard and profiles, to run the sponsor program, to prevent abuse, and to respond to your requests. We do not sell personal data and we do not send marketing email.

3. Retention and deletion

Weekly metric snapshots are kept while an account is connected and for 30 days after it is disconnected. Deleting your account from Settings removes your profile, disconnects all accounts, and deletes snapshots and stored images. Payment records are kept as long as required for accounting.

4. Processors

Supabase (authentication, database, storage), Vercel (hosting), Post for Me (account connections), ScrapeCreators (public follower counts), Dodo Payments (payments), Cloudflare (bot protection).

5. Your rights

You can access, correct, export, or delete your data by using the dashboard or by writing to rohangotwal3@gmail.com.

6. Contact

rohangotwal3@gmail.com.