Privacy Policy

Welcome to BeMySupporter. We respect your privacy and are committed to protecting personal data in a transparent, purpose-limited way.

This Policy applies to all users of the Platform, including visitors, supporters ("Buyers"), creators ("Creators"), and anyone who contacts support or receives communications from us. It works together with our Terms of Service, which govern your use of the Platform. If there is a conflict between this Policy and the Terms regarding privacy-specific matters, this Policy controls for data-processing questions; the Terms control for contractual use of the Platform.

By accessing or using BeMySupporter — including registering, signing in, purchasing, listing items, connecting a payout method, or continuing to use the Platform after we post an updated Policy — you acknowledge that you have read and understood this Policy. Where required by applicable law, we rely on specific legal bases (see Section 4) rather than blanket consent alone. If you do not agree, you must not use the Platform.

We collect categories of information necessary to operate a marketplace. The exact data depends on how you use the Platform:

Identity and account data. Legal name, display name, public handle, email address, phone number, password hash (we never store plaintext passwords), account preferences, verification status, and profile images you upload.

Authentication data. If you sign in through a third-party authentication provider (such as social or OAuth sign-in), we receive the account identifier, name, email address, and profile image URL that provider shares with us, as permitted by your settings with that provider.

Transaction and financial data. Purchase and sale records, order amounts, fees, payout requests, withdrawal history, promo code usage, and creator balance ledger entries — including zero-price digital orders where no payment processor is invoked but we still record checkout, account identity, listing access, and waiver acknowledgements. Bank account details you provide for payouts are encrypted with AES-256-GCM before storage and are displayed to you only in masked form. We do not store full payment card numbers on our servers; card processing occurs on our payment partner's pages.

Storefront and item content. Creator bios, categories, social links, listing titles, descriptions, prices, cover images, digital files, inventory settings, shipping options, and promotional copy you publish.

Fulfilment data. For physical merchandise, delivery names, addresses, and contact details you enter at checkout — shared with the Creator who fulfils the order and, when you select third-party delivery at checkout, with the independent delivery Courier necessary to complete transit.

Communications. Messages sent through Platform messaging, support tickets, and email correspondence with our team.

Technical and telemetry data. IP addresses (including for rate limiting), browser type, device characteristics, session identifiers, server request logs, error traces, page-load performance signals, and coarse geographic signals such as a two-letter country code when your connection provides one.

Moderation and compliance data. Reports, fraud flags, administrative notes, identity-verification materials you submit when requested, and records of enforcement actions.

Direct interactions. When you register, apply to sell, create or edit listings, complete checkout, request payouts, update your profile, send messages, or contact support.

Automated technologies. Through session cookies, strictly necessary local storage, server access logs, application error handlers, rate-limiting systems, and internal performance monitoring that helps us maintain uptime and diagnose failures.

Third-party services. Through payment processors (including WiPay), authentication providers, hosting and infrastructure vendors, email delivery services, and other subprocessors that process data on our behalf under contract and only as needed to provide their integrated function.

We do not operate third-party advertising networks or sell lists of users to data brokers.

We process personal data for defined purposes, relying on one or more of the following legal bases where applicable: performance of our contract with you; legitimate interests in operating a secure marketplace; compliance with legal obligations; and, where required, your consent.

Platform operations. Creating and maintaining accounts, authenticating users, displaying storefronts, delivering digital downloads (including free digital checkout), facilitating creator payouts, and providing customer support.

Transaction fulfilment. Processing orders, sharing delivery details with Creators for physical goods, issuing receipts, and maintaining financial records.

Security and fraud mitigation. Rate limiting, abuse detection, automated risk scoring, account reviews, and investigation of suspicious activity.

Legal and regulatory compliance. Tax, accounting, anti-money-laundering, sanctions screening, law-enforcement requests, and unclaimed-property obligations.

Product improvement. Understanding aggregate usage patterns, fixing bugs, and developing features — using anonymized or aggregated data where possible (see Section 22).

We do not use your personal data for unrelated profiling or third-party targeted advertising.

BeMySupporter uses cookies, session tokens, and similar technologies to operate the Platform, maintain security, and measure how the site is used through our internal analytics system (not third-party ad trackers).

Categories. (a) Strictly necessary cookies for authentication, checkout, CSRF protection, and fraud prevention; (b) functional cookies that remember your choices; (c) analytics cookies that help us count visits, understand entry points, and improve the experience — stored on our servers, not sold to advertisers.

Your choices. Strictly necessary cookies cannot be disabled while you use authenticated or transactional features. You may configure your browser to refuse cookies; doing so may limit sign-in, purchases, or dashboard access.

What we do not do. We do not sell personal information collected through cookies. We do not use third-party advertising networks to build cross-site marketing profiles of you.

We do not sell your personal data. We do not rent, license, or trade personal information to third parties for their independent marketing purposes.

We may disclose information only under limited circumstances:

Service providers. Trusted processors who assist with payment handling, cloud hosting, transactional email, file storage, and infrastructure — bound by confidentiality and data-processing obligations and permitted to use data only to perform services for us.

Creators, Buyers, and Couriers. As needed to complete transactions (for example, shipping details shared with a Creator or selected Courier) and as described in Section 16 regarding public storefront visibility.

Legal compliance and safety. When required by applicable law, regulation, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of BeMySupporter, our users, or the public.

Corporate restructuring. In connection with a merger, acquisition, reorganisation, or sale of assets, subject to Section 26.

We require recipients to handle personal data consistently with this Policy or equivalent protections, except where disclosure is compelled by law.

BeMySupporter is operated from the Republic of Trinidad and Tobago. Your information may be processed in Trinidad and Tobago and in other countries where our service providers maintain facilities.

If you access the Platform from outside Trinidad and Tobago, you understand that your information may be transferred to, stored in, and processed in jurisdictions that may have different data-protection laws than your home country.

Where required for transfers from the European Economic Area, United Kingdom, or other jurisdictions with transfer restrictions, we implement appropriate safeguards, including Standard Contractual Clauses (EU Commission 2021/914), the UK International Data Transfer Agreement (IDTA) or UK Addendum where applicable, contractual protections with processors, and the security measures in Section 8. We do not rely on consent alone where another lawful transfer mechanism is required.

We implement administrative, technical, and physical safeguards designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, and destruction. Measures include, where applicable:

TLS encryption for data in transit; hashed password storage; AES-256-GCM encryption for sensitive payout account numbers at rest; access controls for administrative tools; storage of digital product files outside the public web root; single-use, time-limited download links; rate limiting on authentication and sensitive endpoints; and routine monitoring of error logs.

No system is perfectly secure. You are responsible for safeguarding your credentials and notifying us promptly at support@bemysupporter.com if you suspect unauthorised access. We will investigate and take reasonable steps to protect affected accounts.

We retain personal data only as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting, tax, audit, and reporting requirements.

Active accounts. Profile, listing, and account data are retained while your account remains open and as needed to provide services.

Transaction records. Order and payment records are typically retained for seven (7) years to meet tax and financial record-keeping obligations.

Closed accounts. Closing an account immediately deactivates sign-in and removes active storefront listings from public view, but closure is not the same as erasure. We retain transaction, payment, payout, dispute, fraud-prevention, messaging, and other records for the periods required by law or reasonably necessary to establish, exercise, or defend legal claims. Other personal data is deleted or anonymized when it is no longer needed.

Short-lived tokens. Download links, verification codes, and rate-limiting records expire automatically after their operational window closes.

Listing files. Digital files associated with listings are kept for the life of the listing and deleted after extended non-renewal in accordance with our Terms.

Dormant accounts. Accounts with no qualifying activity for thirty-six (36) consecutive months may be classified as dormant under our Terms. Dormant accounts may be moved into secure, encrypted offline or restricted archival storage that removes active storefront visibility while preserving records we are legally required to keep. See our Terms of Service, Section 14 for maintenance fees that may apply to unused creator balances.

When retention periods expire and we no longer have a lawful basis to keep data, we delete or anonymize it using reasonable technical measures.

Depending on your jurisdiction, you may have rights regarding your personal data, which may include the right to access, correct, delete, restrict, or object to certain processing, and the right to data portability where technically feasible.

Self-service controls. Much of your information can be viewed and updated directly in your account dashboard and creator profile settings, including display name, bio, contact details, payout information, and listing content.

Requests. To exercise rights not available in your dashboard, email support@bemysupporter.com with sufficient detail to verify your identity. We will respond within thirty (30) days, subject to extensions permitted by law for complex requests.

Account closure immediately deactivates access and public listings; it does not automatically erase stored data. Deletion requests are handled consistently with our Terms and legal retention duties. We delete or anonymize eligible data, but may retain records such as completed orders, payments, payouts, disputes, and compliance logs where required by law or needed to protect legal rights after account closure.

If you are in the European Economic Area or United Kingdom, the following additional information applies alongside Section 10.

Controller. BeMySupporter, Trinidad and Tobago.

Lawful bases. We process personal data on the bases described in Section 4: contract performance, legitimate interests (security, fraud prevention, analytics), legal obligation, and consent where required (for example optional marketing).

Your rights. You may have the right to access, rectify, erase, restrict, object to processing, and data portability where applicable. You may lodge a complaint with your local supervisory authority. Contact support@bemysupporter.com to exercise rights.

International transfers. See Section 7 for SCCs, UK IDTA, and safeguards.

Automated decisions. See Section 18. You may request human review of significant automated enforcement actions.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act and California Privacy Rights Act.

Categories collected. Identifiers, commercial information, internet activity, and geolocation data as described in Section 2 — collected for the purposes in Section 4.

Sale and sharing. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. Our internal analytics does not use third-party ad networks.

Your rights. You may request to know, delete, or correct personal information, and to opt out of sale/sharing (not applicable as we do not sell or share for ads). Email support@bemysupporter.com with "California Privacy Request". We will verify your identity before responding.

Non-discrimination. We will not discriminate against you for exercising privacy rights.

We use vetted service providers to operate the Platform, including payment processing (currently WiPay Financial or successors), cloud hosting, transactional email, file storage, and authentication providers you choose at sign-in. These providers process data only on our instructions under contract.

A current list of subprocessors may be requested by emailing support@bemysupporter.com. Material changes to subprocessors affecting international transfers will be reflected in this Policy or communicated where required by law.

We send transactional communications that are necessary to operate your account, including email verification, password resets, purchase receipts, sale notifications, payout updates, listing renewal reminders, and material policy changes. These cannot be opted out of while maintaining an active account.

If we offer promotional newsletters, product announcements, or marketing campaigns, they will be opt-in or include a clear unsubscribe mechanism. You may opt out of promotional email by using the unsubscribe link in those messages or by contacting support@bemysupporter.com.

Opting out of marketing does not affect transactional or legally required notices.

BeMySupporter is not directed at children under thirteen (13), and we do not knowingly collect personal data from children under 13.

Persons under eighteen (18) may use the Platform as Buyers only under the supervision of a parent or legal guardian who accepts our Terms on their behalf. Creators must be at least eighteen (18) years old.

If we learn that personal data was collected from a child without appropriate authorization, we will take steps to delete the account and associated data promptly. Please contact support@bemysupporter.com if you believe a minor has registered improperly.

Creator profiles and listings may contain links to external websites, social media channels, streaming platforms, or tools that BeMySupporter does not operate or control.

We are not responsible for the privacy practices, content, or security of third-party sites. Your interactions with those services are governed by their own policies. We encourage you to review the privacy policies of any external site before providing personal information.

Checkout for Platform purchases occurs through our integrated payment flow; however, after leaving the Platform via an external link, our Policy no longer applies to data you provide elsewhere.

We may modify this Policy at any time to reflect changes in law, technology, or our practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-Platform notice before the changes take effect.

Your continued use of BeMySupporter after the effective date of a revised Policy constitutes your acknowledgment and acceptance of the updated terms, except where applicable law requires separate consent.

This Policy and any dispute arising out of or relating to our processing of personal data shall be governed by the laws of the Republic of Trinidad and Tobago, without regard to conflict-of-law principles that would apply another jurisdiction's laws.

Subject to mandatory non-waivable rights, privacy-related disputes are governed by the laws of Trinidad and Tobago and are subject to the arbitration and forum provisions in our Terms of Service, Section 19. Mandatory data-protection rights apply only to the minimum extent required by applicable law and should be raised with us at support@bemysupporter.com before external proceedings where permitted.

BeMySupporter is a discovery marketplace. Certain information is public by design so Creators can be found and Buyers can evaluate listings:

Creator public profiles may display handles, display names, bios, categories, profile and banner images, social links, active listings, and aggregate sales signals such as purchase counts or popularity indicators where enabled.

Listings display titles, descriptions, prices, cover art, and other content the Creator publishes. Creators control most item-level visibility through dashboard settings, including publishing, hiding, or allowing listings to expire.

Buyer confidentiality. Individual Buyer identities, email addresses, and contact details are not displayed publicly. Creators receive Buyer information only to the extent necessary to fulfil a specific order (for example, shipping details for physical goods). Aggregate, non-identifying analytics may be shown to Creators about their audience.

BeMySupporter administrators may access Platform data as needed for moderation, fraud investigation, support, featured placement, legal compliance, and security — under internal access controls and this Policy.

We operate an internal, private analytics system on our own servers to understand how people use BeMySupporter. This includes visits, pages viewed, general location (country), how you arrived (for example a link from social media or email), session duration, sign-ups, and purchases. We use this information to improve our services and fix problems.

We do not store your email, private messages, or payment card details in our analytics database. We do not use third-party analytics platforms that track you across unrelated websites.

Detailed visit and engagement records are kept for up to nine (9) months, after which they are deleted. We may keep longer-term summary statistics (for example monthly visit totals) so we can measure trends over time.

Administrative and automated bot traffic is excluded where possible. Server security logs may retain IP addresses for a limited period for troubleshooting, separate from analytics.

To protect users and the integrity of transactions, we may apply automated rules and risk-scoring heuristics that analyse account behaviour, transaction patterns, device signals, velocity of actions, and other indicators associated with fraud, abuse, or Terms violations.

Automated decisions may result in temporary holds, additional verification steps, delayed payouts, blocked uploads, or account restrictions. Significant enforcement actions are subject to human administrative review where practicable.

Under GDPR Article 22, where applicable, you may request human review of automated decisions that produce legal or similarly significant effects, request an explanation of the logic involved, and contest the decision by contacting support@bemysupporter.com.

If you believe an automated decision adversely affected you in error, contact support@bemysupporter.com with supporting details. We will review reasonable appeals.

If we receive credible notice that a user has died, we may restrict the account pending verification. We do not grant access to private accounts based on informal requests alone.

Legal executors, estate administrators, or authorised representatives may contact support@bemysupporter.com with appropriate documentation (such as a death certificate and letters testamentary or equivalent court authority) to request access to information, transfer of pending creator balances where permitted by law, or closure of the account.

We may deny requests that are incomplete, fraudulent, or inconsistent with applicable law or our Terms. Public storefront content may be removed or archived at our discretion after verification.

BeMySupporter accounts are intended for individual use unless we expressly authorise a multi-user or studio arrangement in writing. If you share login credentials, grant dashboard access to assistants, bandmates, managers, or studio staff, or otherwise permit others to operate your account, you remain fully responsible for all activity conducted under your credentials.

Any collaborator with access can view and modify data available in your dashboard, including listings, messages, payout settings, and order fulfilment information. You must ensure that collaborators comply with this Policy and our Terms.

If we introduce formal team or collaborator features in the future, additional terms may apply and will be disclosed at launch.

BeMySupporter is not liable for delays or failures in data processing, access, backup retrieval, or support caused by events beyond our reasonable control, including natural disasters, hurricanes, floods, pandemics, war, civil unrest, government orders, power failures, telecommunications outages, DDoS attacks, infrastructure or service-provider failures, payment-network disruptions, and banking holidays.

During such events, security monitoring, backups, or data-access requests may be temporarily delayed. We will resume normal processing as soon as reasonably practicable.

We may create anonymized, de-identified, or aggregated datasets that cannot reasonably be used to identify you. Examples include marketplace-wide sales trends, category popularity, average listing prices, and uptime statistics.

We retain a perpetual right to use such anonymized and aggregated data for internal research, product development, industry reporting, and operational analytics without further notice or compensation, provided the data no longer identifies individual users.

We do not attempt to re-identify anonymized datasets except where required for security investigations or by law.

This Policy is written in English. If we provide translations for convenience, the English version is authoritative and controls in the event of any conflict or ambiguity between translations.

We may offer preview, beta, or experimental features identified as such. These tools are provided "as is" and may collect additional telemetry, change behaviour rapidly, or be discontinued without notice.

Data processed through beta features is handled under this Policy, but availability, accuracy, and security guarantees may be lower than production features until a feature graduates to general release.

Your use of beta features constitutes acceptance of these limitations.

If any provision of this Policy is held invalid, illegal, or unenforceable by a court or regulator of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it enforceable while preserving its intent.

If BeMySupporter undergoes a merger, acquisition, reorganisation, or sale of all or substantially all of its assets, personal data may be transferred to a successor entity that agrees to honour this Policy or provides equivalent or stronger protections, with notice to users where required by law.

Any successor may continue processing your data for the same purposes described herein unless and until you are notified of a materially different policy and given choices required by applicable law.

If you submit feedback, feature requests, bug reports, testimonials, survey responses, or other voluntary suggestions to BeMySupporter, you grant us a non-exclusive, perpetual, royalty-free licence to use, reproduce, modify, and incorporate that feedback into our products and marketing without obligation to you, unless we agree otherwise in writing.

Do not submit confidential or proprietary information you expect to remain private. Feedback sent through public channels or unsolicited email is treated as non-confidential.

If you provide a testimonial or review we wish to publish, we may display your display name, handle, or likeness alongside it with your consent or as permitted by our Terms.

The Platform may allow Buyers and Creators to exchange messages related to orders or listings. Message content is stored so participants can view conversation history and so we can investigate abuse reports.

Messages are visible to the participants, BeMySupporter administrators when needed for moderation or support, and as required by law. Do not share sensitive financial credentials or government ID numbers in chat.

We may scan or review messages using automated tools or human moderators to detect spam, fraud, harassment, or Terms violations. Messages may be retained according to Section 9 even after an account is closed where necessary for dispute resolution or legal compliance.

We maintain procedures to detect, investigate, and respond to suspected security incidents. If we determine that a breach of personal data has occurred that poses a meaningful risk to your rights, we will notify affected users and relevant authorities as required by applicable law, without undue delay.

Notifications may be sent by email or in-Platform message and will describe, to the extent known, the nature of the incident, categories of data affected, steps we are taking, and recommended actions you can take (such as password changes).

Please report suspected vulnerabilities or unauthorised access to support@bemysupporter.com promptly so we can investigate.

Payment processing. Checkout is handled by our payment partner (currently WiPay Financial or successors we designate). When you pay, you are redirected to or interact with their secure flow. They collect payment credentials and process transactions according to their own privacy policy. We receive confirmation metadata — such as transaction status, reference IDs, and amounts — but not your full card number.

Authentication providers. If you choose third-party sign-in, that provider processes your credentials under its own privacy policy. We receive only the profile fields the provider shares with us to create or link your BeMySupporter account.

Other service providers. We use vetted infrastructure, hosting, storage, and communications providers to run the Platform. Those providers process data solely on our instructions under contract and are not named here because they may change over time.

We encourage you to review the privacy policies of payment and authentication partners you interact with directly for details on their independent processing.

Creators may describe offerings using words such as support, tip, donation, contribution, or patronage. BeMySupporter processes those flows as standard marketplace transactions or zero-price digital orders, not as charitable fundraising on our books. We are not a registered charity and do not maintain separate ledgers for "donations".

No partnership in donation collection. Any Creator or user who receives payments described as donations, tips, support, or contributions through bemysupporter.com does so independently and on their own account — not in partnership, joint venture, or affiliation with BeMySupporter. We provide marketplace technology only; we are not a co-recipient, co-solicitor, or responsible party for those amounts and assume no liability for how they are collected, used, or disputed (see our Terms — Voluntary Support section).

Free digital checkout. When you obtain free access to a digital listing, we still collect and process account identity data, order metadata, listing identifiers, timestamps, IP and session signals for fraud prevention, and any checkout acknowledgements you submit (such as digital delivery waivers). This processing is necessary to operate the Platform, enforce our Terms, and maintain audit trails even when no card payment occurs.

Paid voluntary support. When you pay any amount through checkout — regardless of how the Creator labels the listing — payment confirmation metadata (status, reference IDs, amounts, fees) is shared between BeMySupporter, our payment processor, and the Creator's payout records as needed to complete the transaction. We do not independently verify charitable status, intended use of funds, or beneficiary identity.

Disclosures to Creators. Creators receive supporter identity and transaction details necessary to fulfil listings and maintain their own business records. Creators are independent data controllers for any additional personal data they collect off-platform or through direct communications; their use of that data must comply with applicable privacy law and our Terms.

Retention. Free and paid order records are retained according to Section 9 for accounting, fraud prevention, dispute resolution, and legal compliance — even when the checkout total was zero or the listing used contribution-style language.

For contractual rules on voluntary support and non-charitable treatment of payments, see our Terms of Service — Voluntary Support section.

Data controller. BeMySupporter is the data controller responsible for personal information described in this Policy. Address: Trinidad and Tobago.

Contact. For privacy questions, rights requests, or complaints, email support@bemysupporter.com. We will acknowledge and respond within a reasonable timeframe.

Entire policy. This Policy, together with our Terms of Service and any checkout or listing disclosures that reference privacy, constitutes the complete privacy framework for the Platform regarding personal data, superseding prior informal statements on the same subject.