Legal
Privacy Policy
Last updated: September 2026
1. Data we collect
Account data (email, name, authentication identifiers), purchase records (products, amounts, currency, timestamps), creator payout details (handled by Stripe Connect — NAYRUM never stores bank or card numbers), uploaded content (product artwork, videos), and technical logs (rate limiting, security events, access records).
2. How we use it
To operate the marketplace: authenticate you, process purchases and payouts, grant and verify product access, review submissions, prevent fraud and abuse, and publish approved promotional content. We do not sell personal data.
3. Social account connections
When you connect a social account (such as TikTok), we store the authorization tokens encrypted and use them only to publish videos you explicitly create or approve. We never post without your action, and we never read your private messages or contacts. Disconnecting the account deletes the stored tokens.
4. Third parties
Payments and payouts: Stripe. Social publishing: the platforms you connect (e.g. TikTok), under their own terms and privacy policies. Hosting and infrastructure providers process data on our behalf under confidentiality obligations.
5. Retention and security
We keep data only as long as needed to operate the service and meet legal obligations. Access is controlled by row-level security, server-side ownership checks, encrypted token storage, rate limiting, and audit logging.
6. Your rights
You may request access, correction, export, or deletion of your personal data at any time through the platform. Deleting your account removes your personal data except records we must keep for legal and accounting purposes.
7. Changes
We may update this policy; material changes will be announced on the platform. Continued use after changes means acceptance.