Privacy Policy

When you create an account, we collect your email address, password (stored as a salted hash, never in plain text), the role you sign up as, and anything else you choose to add to your profile — a display name, bio, tags, and profile photo.

If you’re a creator, connecting Stripe shares your Stripe account identifiers with us so we can route payouts; we don’t receive or store your bank details or card numbers, which stay with Stripe. If you’re a fan, your payment details are entered directly into Stripe’s checkout and never touch our servers.

We also automatically collect basic technical information — IP address, browser type, and general usage activity — used for security purposes like rate-limiting and fraud prevention.

We use your information to run your account, process subscriptions and payouts, verify your email address, send account-related emails (verification, password resets, receipts), prevent fraud and abuse, and improve ByUs. We don’t sell your personal information.

We share what’s necessary to run the service with the vendors that power it — Stripe for payments and payouts, our hosting and database providers, and our email provider for transactional messages. We don’t share your information with anyone else except where required by law.

A creator’s public profile, posts, and tier information are visible to anyone who visits their page, by design. Your email address is never shown publicly.

We use a single session cookie to keep you signed in. It’s required for the site to function and isn’t used for advertising or cross-site tracking.

We keep your account information for as long as your account is active. If you delete your account, we remove or anonymize your personal information within a reasonable time, except where we’re required to retain records (for example, payment records Stripe keeps for tax or legal purposes).

You can review and update your profile information at any time from your account settings, and you can request that we delete your account and associated personal data by emailing us.

Passwords are hashed, sensitive account actions are rate-limited, and traffic to ByUs is encrypted in transit. No system is perfectly secure, but we take reasonable, industry-standard steps to protect your information.

If we make material changes to this policy, we’ll update the date at the top of this page.

Questions about this policy, or want to access, correct, or delete your data? Email us at evanryon@yahoo.com.