Sugarlist Privacy Policy

Effective Date: August 5, 2025 - Last Updated: August 5, 2025

This Privacy Policy ("Policy") describes how sugarlist.com ("Sugarlist", "we", "our", or "us") collects, uses, and shares information when you use our website, mobile application, and related services (the "Service"). By accessing or using the Service, you consent to the practices described in this Policy.

1. Information We Collect

1.1 Information You Provide

• Account Data: email address, username, password (secured via Firebase Authentication), display name, birthday (optional).
• Profile & Wishlist Data: descriptions, images, wishlists, messages.
• Affiliate Program Data: referral codes, affiliate earnings.

1.2 Information Automatically Collected

• Device and Log Information: IP address, browser type, operating system, referring URLs.
• Usage Data: pages visited, time spent, interactions, error logs (via Firebase and Google Analytics).

1.3 Payment & Token Data

• We do not store full credit-card or bank information.
• Transaction metadata from Stripe (e.g., transaction ID, token purchase amount, chargeback status).
• Token balance, withdrawals, and revenue-sharing records.

2. How We Use Your Information

• Provide, operate, and improve the Service.
• Facilitate token purchases, gifts, tips, affiliate payouts, and withdrawals.
• Detect, investigate, and prevent fraud and Chargebacks.
• Moderate content for safety and compliance.
• Communicate with you about your account, support requests, and policy updates.
• Analyze usage trends to improve user experience and develop new features.

3. Legal Bases for Processing (EEA/UK Users)

• To perform our contract with you (Terms of Service).
• Based on legitimate interests (Service security, fraud prevention, analytics).
• With your consent (marketing emails, optional cookies).
• To comply with legal obligations (tax, anti-money-laundering rules).

4. How We Share Your Information

• Service Providers: Stripe (payments), Firebase (hosting & authentication), Google Analytics (analytics), AI moderation vendors.
• Affiliates: When a transaction occurs via an affiliate link, limited transaction details are shared to credit the affiliate.
• Legal & Safety: We may disclose information if required by law or to protect the rights, property, or safety of Sugarlist or others.
• Business Transfers: In merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

5. Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to remember preferences, keep you logged in, and analyze usage. You can disable cookies in your browser, but parts of the Service may not function properly.

6. Data Retention

• We retain personal data as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
• Transaction and financial records are kept for at least seven (7) years or as required by tax and accounting laws.

7. Security

We implement industry-standard technical and organizational measures to protect your information. However, no Internet transmission or storage system is completely secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data; object to or restrict processing; data portability; and withdraw consent at any time. You can exercise these rights by contacting support@sugarlist.com. We may require identity verification.

9. Children's Privacy

Sugarlist is not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that a child under 18 has provided personal information, we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States. We use standard contractual clauses or other approved mechanisms to protect your data where required.

11. Changes to This Policy

We may modify this Policy periodically. We will post the updated Policy and update the "Last Updated" date. Material changes will be communicated via email or in-app notice.

12. Contact Us

For questions or concerns about this Policy or our data practices, email support@sugarlist.com.