Privacy

Draft — not legally reviewed. This page is scaffolding written alongside the product. It records how FYPbid actually works so a lawyer has the facts to work from; it is not legal advice and must be reviewed, completed and published before taking real payments.

Last updated: not yet published

Who is responsible

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Contact: [CONTACT EMAIL].

What we store, exactly

Public profile data — the handles you submit and the platform each belongs to. This is public information and appears on the board.
Payer email — collected at checkout, used to send your receipt and to verify a later correction request came from the payer.
Bid records — amount, time, resulting position, and the payment provider’s reference. Needed for accounting and refunds.
Outbound clicks — a salted SHA-256 hash of IP address and user agent, never the raw values, so repeat visits can be counted as one without identifying anyone.
Rate-limit counters — a salted hash of IP address, kept for at most one day, to stop automated abuse.

We do not use advertising or analytics cookies, and we do not sell or share this data.

Payment data

Card details are never sent to our servers. They go directly to the payment provider, which acts as its own controller for that data.

Retention

Rate-limit rows: one day. Click records: [RETENTION PERIOD]. Bid and payment records: as long as tax and accounting law in [JURISDICTION] requires.

Your rights

[TO BE COMPLETED BY COUNSEL — access, rectification, erasure, portability, objection, the lawful basis for each purpose above, international transfers by the payment and email providers, and the supervisory authority to complain to in [JURISDICTION].]

Removal from the board

If you are a listed creator and do not want to be listed, write to [CONTACT EMAIL] and we will remove the entry.