Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect information you provide directly: name, email address, password, and profile information when you create an account. For creators, we also collect business details, Stripe account information, and content you upload to the platform.

We automatically collect usage data including IP addresses, browser type, device information, pages visited, and interaction patterns. This data helps us improve the Service and diagnose technical issues.

When you make a purchase, we collect billing information including name, email, and for physical products, shipping address. Payment card details are processed directly by Stripe and are never stored on our servers.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) process transactions and send related communications; (c) send account notifications, security alerts, and support messages; (d) personalize your experience and recommend content; (e) analyze usage patterns to improve the platform; (f) prevent fraud and enforce our Terms of Service; and (g) comply with legal obligations.

We may send marketing communications about new features and platform updates. You can opt out of marketing emails at any time through your account settings or by clicking the unsubscribe link in any marketing email.

3. Information Sharing

We share your information with the following third-party service providers who assist in operating the platform:

  • Stripe — Payment processing for purchases and creator payouts via Stripe Connect. Stripe receives your payment and billing information.
  • Lulu — Print-on-demand fulfillment for physical books. Lulu receives shipping addresses and order details for physical product orders.
  • Bunny.net — Video content delivery for course materials. Bunny receives video files uploaded by creators.
  • Postmark — Transactional email delivery. Postmark receives email addresses for sending order confirmations, notifications, and account communications.

We do not sell your personal information to third parties. We may disclose information if required by law, court order, or governmental regulation, or to protect the safety and security of our users and the platform.

4. Data Storage

Your data is stored on servers operated by Supabase, hosted in the United States (AWS us-west-2 region). We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level security policies, and regular security audits.

We retain your account data for as long as your account is active. If you deactivate your account, we retain order and transaction records as required for legal compliance and record-keeping, but remove personal profile data within 30 days upon request.

5. Cookies

We use essential cookies to maintain your authentication session and remember your preferences. These cookies are strictly necessary for the Service to function and cannot be disabled.

For measuring and improving our own advertising we use the Meta Pixel and Conversions API, which may set cookies such as _fbp and _fbc — see "Advertising and analytics (Meta)" below. Apart from these, we do not use third-party advertising cookies, and any other analytics we use track aggregate usage patterns rather than individual users across websites.

Advertising and analytics (Meta)

We use the Meta Pixel and the Meta Conversions API to understand how visitors find and use Authorist and to measure and improve our advertising. These tools may set cookies (such as _fbp and _fbc) and share limited information with Meta Platforms, Inc. about your visit and certain actions — for example, creating an account or starting a subscription. Where we share an identifier such as your email address for measurement, it is hashed (irreversibly scrambled) before it is sent. This is used only for marketing Authorist itself, and is separate from any advertising tools individual creators use on their own storefronts. You can limit this tracking through your browser and device settings and your Meta ad preferences; see Meta's Privacy Policy for more, and contact us if you'd like to opt out.

6. Your Rights

You have the right to:

  • Access your personal data — view and download your account information at any time through your account settings.
  • Correct inaccurate data — update your profile, name, and preferences through your account settings.
  • Delete your account — deactivate your account through account settings. Contact us at hello@authorist.co to request complete data deletion.
  • Export your data — request a copy of your personal data by contacting us at hello@authorist.co.
  • Opt out of marketing communications at any time.

To exercise these rights, contact us at hello@authorist.co. We will respond within 30 days.

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@authorist.co.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, for registered users, by sending an email notification. Changes become effective when posted. We encourage you to review this policy periodically.

9. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at hello@authorist.co.