Privacy Policy

1. Overview

Sunporch AI is operated by Sunporch AI, LLC, a South Carolina limited liability company ("Sunporch AI," "the Platform," "we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We believe in collecting only the data necessary to operate the Platform. We do not sell your personal information. We do not use advertising trackers or third-party tracking cookies.

2. Information We Collect

Information You Provide

• Account information: Email address, display name, and password when you create an account.
• Profile information: Bio, profile photo, and subscription price (for creators) that you choose to add to your profile.
• Content: Posts, files (images, videos, audio, documents), and associated metadata (such as AI tools used) that you upload to the Platform.
• Payment information: When you subscribe to a creator or set up payouts, payment information is collected and processed by our payment processor, Stripe. Sunporch AI does not store your credit card numbers, bank account details, or other sensitive payment information on our servers.

Information Collected Automatically

• Session cookies: We use a session cookie solely to keep you signed in. This is a functional cookie required for the Platform to work — it is not used for tracking or advertising.
• Server logs: Our hosting provider may automatically collect standard server log data such as IP addresses, browser type, and pages visited. This data is used for security, debugging, and maintaining the Platform.

Information We Do NOT Collect

• We do not use third-party advertising trackers (such as Google Ads or Facebook Pixel).
• We do not use third-party analytics cookies that track you across other websites.
• We do not collect or store biometric data.
• We do not sell, rent, or trade your personal information to third parties.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform.
• Process subscriptions and payments through our payment processor.
• Send you transactional emails (account verification, password resets, payment confirmations).
• Enforce our Terms of Service, including content moderation and the strike system.
• Respond to support requests and legal obligations.
• Protect against fraud, abuse, and unauthorized access.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Payment processing:We share necessary information with Stripe to process payments and payouts. Stripe's handling of your data is governed by Stripe's Privacy Policy.
• Email delivery: We use an email service provider (currently Resend) to send transactional emails. Only your email address and the email content are shared for this purpose.
• File hosting:Content you upload is stored with our cloud storage provider (currently Cloudflare). Files are stored securely and are only accessible through the Platform's access controls.
• Legal requirements: We may disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of Sunporch AI, our users, or the public.

5. Cookies

Sunporch AI uses only essential cookies required for the Platform to function:

Because we only use essential functional cookies (not tracking or advertising cookies), a cookie consent banner is generally not required. However, we disclose our cookie usage here for full transparency.

6. Data Security

We take reasonable measures to protect your information, including:

• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• All data is transmitted over encrypted connections (HTTPS).
• Uploaded files are stored in private cloud storage and accessed only through time-limited signed URLs.
• Payment information is handled entirely by Stripe and never touches our servers.

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal information and content within 30 days, except where we are required to retain records for legal or financial compliance (such as payment transaction records).

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information through your profile settings.
• Delete your account and associated data by contacting us.
• Export your data by contacting us.

To exercise any of these rights, contact us at the email address listed below.

9. Children's Privacy

Creators who earn revenue through the Platform must be at least 18 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us.

10. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States. By using the Platform, you consent to this transfer and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Effective Date" at the top of this page indicates when the policy was last revised.

12. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights regarding your personal information.

In addition to the rights described in Section 8, you have the right to:

• Know the categories of personal information we collect, the sources from which we collect it, the purposes for which we use it, and the categories of third parties with whom we share it.
• Request deletion of personal information we have collected from you, subject to certain exceptions (including legal compliance and fraud prevention).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information (see below).
• Non-discrimination for exercising your privacy rights. We will not deny you service, charge you a different price, or provide a different level of service because you exercised any of your CCPA rights.

Do Not Sell or Share My Personal Information. Sunporch AI does not sell your personal information for monetary consideration, and we do not share your personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months and have no plans to do so. Because we do not sell or share personal information as those terms are defined under the CCPA, no opt-out mechanism is required, but you may still contact us at support@sunporchai.com with any questions.

To exercise any of these rights, contact us at the email address listed below. We will respond to verifiable consumer requests within 45 days as required by law.

13. EU/UK Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation ("GDPR") provides you with the following rights regarding your personal information:

• Right of access — to obtain confirmation of whether we process your personal data and to receive a copy.
• Right to rectification — to have inaccurate personal data corrected.
• Right to erasure("right to be forgotten") — to have your personal data deleted in certain circumstances.
• Right to restriction of processing — to limit how we process your data.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object — to object to the processing of your personal data.
• Right to withdraw consent — at any time, where we rely on consent as the legal basis for processing.
• Right to lodge a complaint with your local data protection authority.

Legal bases for processing. We process your personal data on the following legal bases under the GDPR: (a) performance of a contract (to provide the Platform to you), (b) compliance with legal obligations (such as tax and fraud-prevention requirements), (c) our legitimate interests (such as securing the Platform and improving our services), and (d) your consent, where applicable.

International data transfers. The Platform is operated from the United States. By using the Platform, you acknowledge that your personal data will be transferred to and processed in the United States, which may have data protection laws different from those in your country.

To exercise any of these rights, contact us at the email address listed below.

14. Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Notification will be made by email to the address associated with your account and will include, to the extent known, the nature of the breach, the categories of data affected, the steps we are taking in response, and any actions you can take to protect yourself.

15. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: