Privacy Policy — MyPopBy

Effective date: 2026-11-03
Controller: PopBy LLC (“PopBy,” “we,” “us”)
Product: MyPopBy
Contact: legal@mypopby.com · 620-690-1126
Registered office: 4601 E. Douglas Ave., STE 150, Wichita, KS 67218, USA

US-focused privacy policy for MyPopBy, including a California CCPA notice.

1. Scope

This policy describes how we collect, use, share, and protect personal information when you use MyPopBy (website, apps, and related services). It does not cover third-party sites linked from campaigns.

2. Information we collect

You provide

• Account data: your first and last name (kept private: never shown on your profile or to other members, used for receipts and account verification), your brand name (the public name shown on your profile, events and tickets), email, password (hashed), phone (if provided), and other profile details
• Creator/campaign content: bios, event descriptions, images, locations, schedules
• Support messages and survey responses
• Tax or identity details if required for payouts (creators)

Payment data

• Payments are handled by Stripe. We do not store full card numbers on our servers. Stripe may provide us with limited payment metadata (last4, brand, charge IDs, payout status).

Automatically collected

• Device and log data: IP address, browser type, pages viewed, approximate location derived from IP, timestamps, referral URLs
• Cookies and similar technologies for login session, security, preferences, and basic analytics

From others

• Fraud-prevention or identity signals from Stripe or similar providers
• Information a creator or fan shares about a campaign that may identify you (e.g., display name on a pledge wall if you opt in)

3. How we use information

• Provide and improve the marketplace (accounts, campaigns, pledges, messaging features we offer)
• Process payments, fees (10% platform fee, or 3% on a founding creator’s first PopBy; $1 seat fee), refunds, and chargebacks
• Prevent fraud, abuse, and security incidents
• Send transactional email (receipts, campaign updates, security alerts)
• Send product or marketing email if you opt in or as allowed by law (you can unsubscribe)
• Comply with law, enforce Terms, and protect rights and safety
• Aggregate or de-identify data for analytics and business planning

4. How we share information

We do not sell your personal information for money. We share as needed to run the service:

Registered agent and banking partners (e.g., Mercury) receive business information as needed for company operations, not routine consumer browsing data.

5. Cookies

We use essential cookies for authentication and security. We may use analytics cookies to understand feature usage. You can control cookies in your browser; disabling essential cookies may break login.

6. Retention

We keep account and transaction records as long as your account is active and as needed for legal, tax, dispute, and fraud purposes (often several years for payment records). You may request deletion; we may retain limited data when required by law or legitimate business needs (e.g., completed transaction ledgers).

7. Security

We use reasonable administrative, technical, and physical safeguards (encryption in transit, access controls, hashed passwords). No method of transmission or storage is 100% secure.

8. Your choices (US)

• Update profile information in account settings
• Unsubscribe from marketing emails via the link in those emails
• Request access, correction, or deletion by emailing legal@mypopby.com
• Delete your account yourself in Settings on your account page. Deletion starts a 30-day grace period: your account is closed to others and any open ticket holds are cancelled right away, and if you sign in again within 30 days you can restore it. After 30 days we permanently erase your name, brand name, email, phone, photo, socials and saved cards and close your sign-in. We keep payment records without your name as the law requires. Deletion is blocked while money is owed or you host an upcoming event with paid tickets. To have everything erased immediately, email legal@mypopby.com

If you are a resident of a state with additional privacy rights, email us with your state of residence and request type. We will respond as required by applicable law. We will not discriminate against you for exercising rights we are required to honor.

9. California (CCPA / CPRA)

If you are a California resident, California law provides additional rights regarding personal information, subject to exceptions.

Categories we may collect (depending on how you use MyPopBy): identifiers (name, email, IP address, account IDs); commercial information (pledge and transaction history); internet / electronic activity (pages viewed, device/log data); approximate geolocation from IP; professional or employment-related information if you provide it as a creator; and inferences drawn from the above for fraud prevention or product improvement. Sensitive information (such as account login credentials) is used only to provide the account.

Sources: you; your device/browser; payment and fraud vendors (e.g., Stripe); and other users when needed for a campaign (e.g., public display name).

Business / commercial purposes: the uses in Section 3 (operate the service, payments, security, communications, legal compliance, analytics).

Disclosure: we disclose personal information to service providers and the categories of recipients in Section 4 for those business purposes. We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as that term is commonly used. If that ever changes, we will update this policy and provide an opt-out method.

Your California rights (subject to verification and legal limits):

• Know / access categories and specific pieces of personal information we collected about you
• Delete personal information we collected from you
• Correct inaccurate personal information
• Opt out of sale or sharing (we do not currently sell or share as described above)
• Limit use of sensitive personal information to what is necessary to provide the service
• Not be discriminated against for exercising these rights

How to exercise: email legal@mypopby.com with “California privacy request,” your request type, and enough information for us to verify you control the account. You may use an authorized agent as allowed by law. We will respond within the timeframes California law requires.

10. Children

MyPopBy is not directed to children under 13 (or under 16 where a higher age applies). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

11. International users

We are based in the United States (Kansas). If you access the service from outside the US, you understand your information may be processed in the US, where laws may differ from those in your country. The service is primarily designed for US users.

12. Changes

We may update this policy by posting a new version with a new date. Material changes will be called out in-product or by email when practical.

13. Contact

Privacy questions: legal@mypopby.com
PopBy LLC, 4601 E. Douglas Ave., STE 150, Wichita, KS 67218, USA