Privacy Policy

Last updated: March 12, 2026

This Privacy Policy explains what we collect, how we use it, and the choices you have when using our website and apps (the "Service"). It applies to your use of the Service wherever this Privacy Policy is posted or referenced.

1) What We Collect

Account and profile data: Username, display name, avatar/banner, account type (Buyer or Seller), and settings you provide.
Content and interactions: Media you upload, posts, comments, likes, messages, and transaction activity.
Ledger and transaction data: Records of chat credit purchases and usage across Buyer‑Seller pairs, including ledger balances, timestamps, and transaction history.
Technical data: Device and browser information, IP address, and basic analytics to operate and secure the Service.
Identity verification data: For Sellers, a government‑issued photo ID and a selfie photograph may be collected as part of the identity verification process. See Section 3 for details.
Voice data: If you use our voice tools, we may collect voice samples, generated voice files, and related metadata to operate voice cloning and speech features.

2) Account Types and Data

Buyer Accounts: We store your purchase history, chat credit balances, and ledger records with each Seller you interact with.
Seller Accounts: We store your content, earnings records, ledger balances with Buyers, and payout history. Identity verification documents submitted during the verification process may also be retained privately with restricted access.
Ledger System: For each Buyer‑Seller relationship, we maintain a ledger tracking credit purchases and usage. This ledger includes: transaction amounts, timestamps, current balance, and usage history. Ledger balances are always zero or positive.

3) Identity Verification

Sellers must complete identity verification before receiving payouts. Paid Space handles this process directly and keeps submitted verification materials private.

What is collected: A government‑issued photo ID (e.g., passport, driver's license, national ID card) and a selfie photograph for identity matching.
Purpose: These documents are reviewed to confirm that the person requesting payouts matches the identity on the submitted ID.
Storage: Verification documents are handled by Paid Space and stored privately with restricted internal access. They are not public user content.
Retention: Verification documents are retained privately for as long as your Seller account is active and for a reasonable period afterward for legal and compliance purposes. You may request deletion of these documents by contacting us.

4) Where Data Lives

Firebase Realtime Database / Firestore: User profiles, content metadata, ledger records, and transaction history.
Firebase Storage: Media files (images/videos), thumbnails, and previews. All content must comply with our content policy.
Secure storage: Identity verification documents for Sellers, stored privately by Paid Space with restricted access.
Voice tools: Voice samples and related generated audio used for voice features are stored privately with restricted access.
Public content: Public posts, profile uploads, and other non-chat content should be treated as public and not as confidential, even if certain features display that content behind overlays or within limited views.
In your browser: We cache preferences (theme, language, view mode) in localStorage to improve performance. This data stays on your device and is never sent to our servers automatically.

Cookies

We use the following cookies:

Session cookie (__session): An encrypted cookie that identifies you to our server so you stay signed in. It is HttpOnly (invisible to scripts) and expires when your session ends or after 1 hour.
Trusted device (__td): When you verify your identity via two-factor authentication and choose "Trust this device," we set a signed, HttpOnly cookie that lasts 30 days so you are not asked again on the same browser.
Anti-fraud token (__af): A signed, HttpOnly cookie issued when you load a page, required for payment requests. It helps block automated bots and expires after 24 hours.
Referral (ps_ref): If you arrive via a referral link, we store the referrer's identifier for 30 days so they receive credit if you sign up.
Analytics (_ga, _ga_*): Set by Google Analytics (Firebase) to understand how the Service is used. These cookies are only set if you accept analytics via the cookie consent banner. They last up to 2 years.

You can control cookies through your browser settings or by responding to our cookie consent banner. Declining analytics cookies does not affect the functionality of the Service.

We operate from the United States. Your information may be stored and processed in the United States and other locations where our service providers operate.

5) Content Moderation and Compliance

Content Policy: We moderate content to ensure compliance with our content policy and applicable law. Violations may result in content removal and potential account termination.

We use automated systems and human review to detect prohibited content.
We may access and review your content to enforce our Terms and content policies.
We retain moderation logs, including records of removed content and policy violations, for compliance and safety purposes.
We cooperate with law enforcement as legally required.

6) How We Use Information

To operate the Service: deliver content, process transactions, maintain ledger balances, and facilitate Buyer‑Seller interactions.
To process transactions: facilitate purchases, review and process withdrawal requests, manage Seller payouts, and maintain transaction records.
To moderate content: enforce our content policy and Terms of Service.
To provide voice features: process voice samples and generated audio for voice cloning and speech tools.
To personalize your experience: remember preferences, display relevant content, and improve features.
To ensure safety and security: prevent fraud, detect abuse, and protect users.
To communicate: send transaction confirmations, safety notices, and support responses.
To comply with law: respond to legal requests and meet regulatory obligations.

7) Sharing

Service providers: We share data with providers who help operate the Service (e.g., Firebase, analytics).
Between users: Buyers and Sellers can see each other's public profiles and shared interaction history (e.g., chat messages, ledger balances within their relationship).
Legal compliance: We may share information to comply with law, prevent harm, or respond to valid legal requests.
Aggregated data: We may share de‑identified, aggregated information that cannot identify you.
We do not sell your personal information or share it with third parties for their own marketing purposes.

8) Your Choices

Update profile details in Settings.
Clear local preferences by removing this site's data in your browser.
Accept or decline analytics cookies via the consent banner. You can reset your choice by clearing this site's data in your browser.
Request account deletion via in‑app support or by contacting us.
Request deletion of identity verification documents by contacting us.

Depending on your location (e.g., California, EU), you may have additional rights including access, correction, deletion, or data portability. Contact us to exercise these rights. We may verify your identity before responding.

We do not sell personal information as defined under California law, and we do not share data for cross‑context behavioral advertising.

9) Data Retention

Account data: Retained while your account is active and for a reasonable period after deletion for legal and operational purposes.
Ledger and transaction records: Retained for at least 7 years for financial compliance and dispute resolution.
Moderation records: Retained as needed for safety, compliance, and legal purposes.
Content: Deleted upon your request or account termination, except where retention is required by law.

10) Security

We use reasonable safeguards including encryption, access controls, and secure infrastructure. However, no online service is 100% secure.

11) Children

The Service is for adults 18+. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it.

12) Content Removal and DMCA

We remove content that violates our Terms, including our content policy, intellectual property rights, or applicable law.

To submit a takedown request, email hey@paid.space with: (i) description of the content; (ii) URL or location; (iii) your contact information; and (iv) a good‑faith statement that the content is unlawful or unauthorized.

For U.S. copyright notices under the Digital Millennium Copyright Act, including notices submitted under 17 U.S.C. §512(c)(3) and counter-notices under 17 U.S.C. §512(g), contact hey@paid.space. We may forward notices or counter-notices to the affected user as permitted by law.

13) Changes

We may update this Privacy Policy. Material changes will be communicated via the Service. Continued use after changes constitutes acceptance.

14) Contact

For privacy questions, data requests, or content removal, contact us at hey@paid.space or through in‑app support. We may verify your identity before responding.