Privacy policy

1. Information we collect

Account information. Your email address, or your name, email, and avatar if you sign in with Google. Sign-in is passwordless (short-lived one-time email codes), so we never collect or store account passwords. We receive only basic profile information from Google and never your Google password.

Campaign information. The product details you submit (product URL, name, description, target audience, selling points) and the campaign data generated from them.

Payment information. Payments are processed by Stripe. We receive transaction status, amount, and a payment reference. We never receive or store your card number.

Usage information. Standard technical data such as IP address, browser type, and pages visited, collected via server logs and strictly necessary cookies (session and authentication). We do not use third-party advertising trackers or web analytics.

Publicly available Reddit data. To track delivery and report engagement, the Service automatically collects publicly available data from Reddit relating to campaign posts, post status, upvote counts, and comments (which may include Reddit usernames and comment text). This data is sourced from public Reddit pages, used solely for delivery tracking and campaign reporting, and retained as described in Section 5.

2. How we use your information

• To provide, maintain, and analyze the Service: generate campaign plans, execute campaigns, display delivery progress, and produce campaign reports
• To process payments and any applicable settlements or refunds
• To send service notifications (e.g., plan generation completed, campaign report ready); you may contact us at [email protected] to adjust service notifications
• To secure the Service, prevent fraud and abuse, and comply with legal obligations

We do not sell or share your personal information for advertising, and we do not use your campaign data to advertise to third parties.

3. Sharing with third parties

We share data only with service providers and in the circumstances necessary to operate the Service:

These providers access, process, or store personal information only to perform their functions for us.

The community participants who publish campaign content never receive your identity, contact details, or order information — they see only the product name, the target community, and the content and instructions needed to publish.

We may also disclose personal information: (a) to comply with law, legal process, or enforceable governmental requests, or to protect our rights, safety, or property; and (b) in connection with a merger, acquisition, financing, or sale of assets, in which case your information may transfer to the successor entity, and to our affiliates who will handle it consistently with this Policy.

Note that campaign content itself (which may reference your product name and selling points) is published publicly on Reddit as part of the Service, and once published is subject to Reddit's terms.

4. Legal bases for processing (EEA / UK)

Where the EU or UK GDPR applies, our legal bases are: performance of a contract (to provide the Service you purchase); legitimate interests (to secure, improve, and prevent abuse of the Service); consent (where we ask for it, which you may withdraw at any time); and compliance with legal obligations.

5. Data retention

• Campaign data (posts, status, reports) is visible in your dashboard for 90 days after a campaign ends.
• Underlying records (execution logs, settlement snapshots, audit logs) are retained for at least 180 days, or longer where required for legal, accounting, or dispute-resolution purposes.
• Account information is retained while your account is active. You may request deletion at any time (Section 6).

6. Your rights

Depending on your location, you may have the right to access, correct, update, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and may need to verify your identity first. Deleting your account does not remove records we are legally required to keep (e.g., transaction records). If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

7. California privacy rights

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction of your personal information, and to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), and we do not process sensitive personal information to infer characteristics. To exercise your rights, contact us at [email protected]; you may use an authorized agent, and we may verify your request before responding.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), passwordless authentication (short-lived one-time email codes), role-based access control, and audit logging of administrative access. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

9. Cookies

We use only strictly necessary cookies for session management and authentication. No advertising, analytics, or cross-site tracking cookies are used.

10. Children

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.

11. International transfers

We operate from Singapore. Your information will be processed in Singapore and other jurisdictions where we or our service providers operate, which may differ from your own. Where required, we use appropriate safeguards for such transfers.

12. Changes to this policy

We may update this Policy from time to time. Material changes will be notified by email or on this page with an updated "Last Updated" date.

13. Contact

Privacy questions or requests: [email protected]

Data controller: Bit Computing Pte. Ltd., 133 Cecil Street, #11-01A, Keck Seng Tower, Singapore 069535