Privacy Policy

ChikiPay is currently in pre-launch. This policy will be finalized before the platform opens. Last updated: August 2026.

1. What We Collect

From creators:

  • Email address and password (for account access)
  • Display name, bio, avatar, and social links (for your storefront)
  • Government-issued ID (for identity verification — stored securely and not shared)
  • Payout information (bank details or PayPal — encrypted at rest)
  • Uploaded content files (stored in encrypted object storage)

From buyers:

  • Email address (for purchase confirmation and download links)
  • Age confirmation (self-declaration that buyer is 18+)
  • Payment information is collected directly by our payment processor — ChikiPay never sees or stores card numbers

From all visitors:

  • Basic analytics via Cloudflare Web Analytics (no cookies, no personal data, privacy-respecting)
  • Server logs (IP address, user agent) retained for 30 days for security purposes

2. How We Use Your Data

  • To operate the Platform — display storefronts, process orders, deliver content
  • To process creator payouts
  • To send transactional emails (purchase confirmations, payout notifications)
  • To enforce our Content Policy and Terms of Service
  • To detect and prevent fraud

3. What We Don't Do

  • We don't sell your personal data to third parties
  • We don't use tracking cookies or third-party ad trackers
  • We don't share buyer information with creators beyond what's needed for the transaction
  • We don't use your content for training AI models

4. Data Security

All data is transmitted over HTTPS. Sensitive data (payout details, ID documents) is encrypted at rest. Payment card data never touches our servers — it's handled entirely by our PCI DSS-compliant payment processor. Access to personal data is restricted to authorized personnel on a need-to-know basis.

5. Data Retention

  • Creator accounts: retained while the account is active and for 30 days after deletion
  • Buyer email and order data: retained for 1 year after purchase for support and dispute resolution
  • Delivered files: retained for 90 days after purchase, then deleted
  • ID verification records: retained as required by applicable regulations
  • Server logs: retained for 30 days

6. Your Rights

You can request access to, correction of, or deletion of your personal data by emailing us. Creators can export their sales data and delete their account from the dashboard. Buyers can request deletion of their purchase records.

7. Cookies

ChikiPay uses only essential cookies required for the Platform to function (session tokens for logged-in creators). We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

8. Third-Party Services

  • Payment processor: processes payments on our behalf (PCI DSS compliant)
  • Cloud hosting: stores and serves content (encrypted at rest)
  • Cloudflare: CDN, DDoS protection, and privacy-respecting analytics
  • Transactional email service: sends purchase confirmations and notifications

9. Changes to This Policy

We'll notify registered users of material changes via email. The latest version is always available at this URL.

10. Contact

Privacy questions? Email us at privacy@chikipay.app.