Privacy Policy — Oh My Baddie

1. Information We Collect

We collect information you provide directly:

Account information: email address, username, display name, and password
Profile information: avatar, banner image, bio, and other optional profile details
Payment information: processed entirely through Stripe. We do not store full credit card numbers on our servers
Content: photos, videos, and messages you post or send on the Platform
KYC data: legal name, date of birth, address, and tax identification number (encrypted) for creator verification
Communications: information you provide when contacting us through our contact form

We also collect automatically:

Usage data: pages viewed, interactions, and referring URLs
Device data: IP address, browser type, operating system
Geolocation: approximate location based on IP address for US/CA access restriction

2. How We Use Your Information

We use your information to:

Operate, maintain, and improve the Platform
Process transactions and manage subscriptions
Facilitate messaging between users
Send notifications about activity on the Platform
Respond to your inquiries and support requests
Enforce our Terms of Service and prevent fraud or abuse
Comply with legal obligations

3. Cookies

We use essential cookies for authentication and site functionality. We also use a cookie to store your theme preference (light/dark/system). No third-party tracking cookies are used. You can control cookies through your browser settings, but disabling essential cookies may affect Platform functionality.

4. Third-Party Services

We use the following third-party services:

Stripe: payment processing. Your payment data is handled by Stripe in accordance with their privacy policy
Google reCAPTCHA: protects our contact form from spam. Subject to Google's Privacy Policy and Terms of Service
Google Fonts: for typeface rendering

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., financial transaction records).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction or deletion of your data
Object to or restrict processing of your data
Data portability
Withdraw consent at any time
Lodge a complaint with your local data protection authority

To exercise these rights, please contact us.

7. Data Security

We implement industry-standard security measures, including encryption of sensitive data (e.g., tax IDs) at rest and TLS encryption in transit. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Contact

For privacy-related inquiries, please contact us.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

Information We Collect

We collect the categories of personal information described in Section 1 above, including identifiers (email, username), internet activity (usage data, IP address), and commercial information (transaction records).

No Sale of Personal Information

Oh My Baddie does not sell your personal information to third parties. We do not share personal information for cross-context behavioral advertising.

Your CCPA Rights

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions
Right to Opt-Out: You have the right to opt out of the sale of your personal information. We do not sell personal information, so no opt-out is needed
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, please contact us with "CCPA Request" as the subject. We will verify your identity and respond within the time frame required by law.