Privacy Policy

Account data: email, username, password (stored only as a salted hash), and your self-attested date of birth (used to verify you are 18+). Profile data for creators: display name, bio, and connected platform handles. Payment data: card details are collected and stored by Stripe, not by us — we keep only non-sensitive references (e.g., card brand and last four), transaction records, and, if you use a wallet, your store-credit balance and top-up history. Usage and security data: pledges, ideas, IP address, device/user-agent, and cookies or similar identifiers used for login, sessions, and security events.

Creator identity verification (KYC) and payouts are handled by Stripe Connect. Stripe collects and verifies government identity information directly; Kamirin does not build or store its own government-ID verifier. We receive only verification status and the limited fields needed to operate payouts and tax reporting.

When a creator links a platform account (e.g., Twitch, YouTube, Kick, TikTok, Facebook, Instagram) via OAuth, we receive that account’s public identifiers — canonical id, handle, display name, follower/subscriber count, and any native verified signal — to prove ownership and help prevent impersonation. Access tokens are encrypted at rest and are never exposed to the browser.

You can disconnect a platform at any time. When you disconnect, we delete the stored access tokens and the connected-account record; limited identifiers (such as the platform id and handle) may persist in our security and audit logs and, for creators, in the public creator directory, as described in Section 8. Each connected platform’s own use of your data is governed by that platform’s terms and privacy policy. For TikTok specifically, our use of TikTok data is subject to TikTok’s developer and privacy terms; you can review TikTok’s Privacy Policy and revoke Kamirin’s access at any time from your TikTok account settings, and disconnecting removes the TikTok tokens we hold.

To operate the marketplace (pledging, acceptance, delivery, settlement, refunds); to verify eligibility and identity; to provide notifications and security alerts; to prevent fraud, abuse, and money laundering; to comply with legal and tax obligations; and to improve the service. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We currently send only transactional and security email, not marketing.

We share data with service providers that operate the Platform under contract — notably Stripe (payments and identity), our transactional email provider, the connected platforms you link, and our cloud hosting and infrastructure providers — and as required by law or to protect rights and safety. A current list of key sub-processors is available on request. Public information you choose to publish (e.g., a creator page or a pledge shown in the public pledge book) is visible to others according to your visibility settings.

We use cookies and similar technologies that are necessary to run the Platform — to keep you signed in, secure sessions, and complete OAuth logins. We do not use third-party advertising cookies or cross-site behavioral tracking. You can control cookies through your browser.

To protect the marketplace, we run automated checks — including fraud, velocity, and collusion signals — that can flag, hold, decline, or reverse transactions and route content or deliveries for human review. These checks inform decisions that may affect your account or a payment. You can contact us to ask about a decision and request human review.

You can access a portable copy of your data and delete your account from your account settings, and correct your profile details there. Depending on where you live, you may also have the right to know what we collect, to request deletion or correction, to opt out of any “sale” or “sharing” (we do neither, as defined above), to limit use of sensitive information, and not to be discriminated against for exercising these rights. You can exercise these rights, use an authorized agent, or appeal a decision by contacting privacy@kamirin.com.

When you delete your account, we scrub your personal data and close the account. For legal, tax, and financial-integrity reasons, money and audit records are retained (some may contain the limited identifiers described in Section 3), and deletion is blocked while you have active charged pledges or a held payout. We keep personal data only as long as needed for the purposes above or as the law requires; transaction and audit records are retained for the periods required by financial and tax law (generally at least seven years).

The Platform is for adults 18 and older. We require users to attest that they are 18+, and we may request verification. We do not knowingly collect data from anyone under 18, and accounts found to belong to minors are removed.

The Platform is intended for users in the United States and is not directed to the European Economic Area or the United Kingdom. Your data is processed in the United States. If you access the Platform from outside the United States, you consent to that processing.

We protect accounts with hashed passwords, authenticator-app two-factor authentication, revocable sessions, encryption of sensitive tokens at rest, signed and idempotent payment webhooks, and an immutable audit log of money and moderation events. No system is perfectly secure, but we design to minimize what we hold and to detect misuse. If a breach affects your personal data, we will notify you and the authorities as required by law.

We may update this Policy; the version above will change for material updates. Privacy questions and data-rights requests can be sent to privacy@kamirin.com.