Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains what we collect, how we use it, and your choices when using our website and apps (the "Service").

1) What We Collect

Account and profile data: Username, display name, avatar/banner, account type (Buyer or Seller), and settings you provide.
Content and interactions: Media you upload, posts, comments, likes, messages, and transaction activity.
Ledger and transaction data: Records of payments and chat credit usage between Buyer-Seller pairs, including balances, timestamps, transaction history, refund status, and fee calculations.
Auto Session metadata: For Buyers using Auto Sessions — our main payment method, which connects your crypto address to creators' addresses — we record the deposit identifier, deposit and refund addresses, asset, amount, session window, status, transaction hashes, settlement/refund events, and fee calculations.
Technical data: Device and browser information, IP address, and basic analytics to operate and secure the Service.
Identity verification data: For Sellers, a government-issued photo ID and a selfie may be collected during verification. See Section 3.
Voice data: If you use voice tools, we may collect voice samples, generated audio, and related metadata to run those features.

2) Account Types and Data

Buyer Accounts: We store your payment history, credit balances, and ledger records with each Seller you interact with.
Seller Accounts: We store your content, earnings, ledger balances, and payout history. Verification documents are kept privately with restricted access.
Ledger System: For each Buyer-Seller pair, we keep a ledger of amounts, timestamps, current balance, and usage history. Balances are always zero or positive.

3) Identity Verification

Sellers must complete identity verification before receiving payouts. Paid Space handles this process directly and keeps submitted verification materials private.

What is collected: A government-issued photo ID (passport, driver's license, or national ID) and a selfie for identity matching.
Purpose: To confirm the person requesting payouts matches the submitted ID.
Storage: Verification documents are stored privately with restricted internal access and are never public.
Retention: We keep verification documents while your Seller account is active, plus a reasonable period for legal purposes. You may request deletion by contacting us.

4) Where Data Lives

Firebase Realtime Database / Firestore: User profiles, content metadata, ledger records, and transaction history.
Firebase Storage: Media files, thumbnails, and previews, all subject to our content policy.
Private buckets: User media, verification documents, and voice data live in private, access-controlled storage buckets. Our buckets are not publicly listable or browsable, and files are served only through authenticated, permission-checked requests.
Secure storage: Seller verification documents, stored privately with restricted access.
Voice tools: Voice samples and generated audio, stored privately with restricted access.
Auto Sessions — on-chain (EVM): On Ethereum and Base, Buyer funds sit in an open-source, non-custodial smart contract under the Buyer's chosen parameters. Paid Space holds no private key controlling these funds and cannot redirect them. We keep only the metadata needed to display, settle, refund, and reconcile the deposit (identifier, addresses, asset, amount, session window, status, transaction hashes, fees, and events).
Session keys (Solana and Tron only): Where smart contracts are not practical, we generate a single-use session keypair per deposit. The private key lives in restricted storage, is used only for the settlement-or-refund flow the Buyer agreed to, and is never exposed to other services, clients, or third parties.
Public content: Treat public posts and profile uploads as public, even when shown behind overlays or limited views.
In your browser: We cache preferences (theme, language, view mode) in localStorage. This stays on your device.

Cookies

We use a small set of cookies: an encrypted session cookie that keeps you signed in, security cookies for trusted devices and fraud prevention, a referral cookie, and optional analytics cookies that are set only if you accept them via the consent banner.

You can control cookies in your browser or via our consent banner. Declining analytics cookies does not affect the Service.

We operate from the United States. Your information may be stored and processed there and wherever our providers operate.

5) Content Moderation and Compliance

Content Policy: We moderate content for compliance with our content policy and the law. Violations may lead to removal or account termination.

We use automated systems and human review to detect prohibited content.
We may access and review your content to enforce our Terms and content policies.
We keep moderation logs, including removed content and violations, for compliance and safety.
We cooperate with law enforcement as legally required.

6) How We Use Information

To operate the Service: deliver content, process payments, maintain ledgers, and support Buyer-Seller interactions.
To process transactions: handle payments between users' addresses, manage payouts and refunds, apply disclosed fees, reconcile Auto Session deposits, and keep records.
To moderate content: enforce our content policy and Terms of Service.
To provide voice features: process voice samples and generated audio.
To personalize: remember preferences, show relevant content, and improve features.
For safety and security: prevent fraud, detect abuse, and protect users.
To communicate: send transaction confirmations, safety notices, and support responses.
To comply with law: respond to legal requests and meet regulatory obligations.

7) Sharing

Service providers: We share data with providers who help operate the Service (e.g., Firebase, analytics).
Between users: Buyers and Sellers can see each other's public profiles and shared history (chat messages, their ledger balance).
We may share information to comply with law, prevent harm, or respond to valid legal requests.
Aggregated data: We may share de-identified information that cannot identify you.
We do not sell your personal information or share it with third parties for their own marketing purposes.

8) Your Choices

Update profile details in Settings.
Clear local preferences by removing this site's data in your browser.
Accept or decline analytics cookies via the consent banner; reset your choice by clearing this site's data.
Request account deletion via in‑app support or by contacting us.
Request deletion of identity verification documents by contacting us.

Depending on your location (e.g., California, EU), you may have rights to access, correct, delete, or export your data. Contact us to exercise them; we may verify your identity first.

We do not sell personal information under California law or share data for cross-context behavioral advertising.

9) Data Retention

Account data: Kept while your account is active and for a reasonable period after deletion for legal reasons.
Ledger and transaction records: Kept for at least 7 years for financial compliance, abuse prevention, and dispute resolution, including Auto Session addresses, transaction hashes, and fee records.
Moderation records: Retained as needed for safety, compliance, and legal purposes.
Content: Deleted on request or account termination, unless the law requires we keep it.

10) Security

We use reasonable safeguards including encryption, access controls, and secure infrastructure. However, no online service is 100% secure.

11) Children

The Service is for adults 18+. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it.

12) Content Removal and DMCA

We remove content that violates our Terms, including our content policy, intellectual property rights, or applicable law.

To request a takedown, email hey@paid.space with a description of the content, its URL or location, your contact information, and a good-faith statement that it is unlawful or unauthorized.

For U.S. DMCA notices (17 U.S.C. §512(c)(3)) and counter-notices (§512(g)), contact hey@paid.space. We may forward notices to the affected user as permitted by law.

13) Changes

We may update this Privacy Policy. We will announce material changes via the Service; continued use means you accept them.

14) Contact

For privacy questions, data requests, or content removal, contact us at hey@paid.space or through in‑app support. We may verify your identity before responding.