Privacy Policy

This policy explains what we collect, why, and what your choices are.

Who we are

DTC Native is operated by Byteex. The data controller is Byteex. Contact: support@dtcnative.com.

What we collect

Account info - your email, password (hashed by Supabase Auth), display name, handle, avatar, bio, brand details. You provide this directly.

Payment info - handled by Stripe. We never see or store your full card details. We do store your Stripe customer ID and subscription status.

Content you post - posts, comments, polls, RSVPs, bookmarks, badge awards, lesson progress, mentions, reactions.

Activity - logged-in sessions, last-active days (for streaks), basic analytics (page views, referrer). We use first-party analytics where possible.

Email engagement - opens and clicks on transactional emails (via Resend), to debug deliverability and improve our messaging.

What we don't collect

• We don't sell your data
• We don't use third-party advertising trackers
• We don't fingerprint your browser

Why we collect it

• to provide the service (your posts, comments, profile, billing)
• to send transactional and (with your consent) marketing emails
• to improve the product (which features get used, where people drop off)
• to comply with our legal obligations (tax records, fraud prevention)

Who we share it with

• Supabase (hosting, database, auth) - US/EU regions, GDPR-compliant
• Stripe (payments) - see https://stripe.com/privacy
• Resend (transactional email) - see https://resend.com/legal/privacy-policy
• Cloudflare Stream (video hosting, lessons only)
• Vercel (web hosting, edge network)

We don't share your data with anyone else without your explicit consent, unless required by law.

How long we keep it

We keep your account data for as long as you have an account. If you delete your account, we anonymize your posts (your name becomes "Former member") and remove your profile within 30 days. Some financial records are retained longer where law requires.

Email logs are retained for 90 days.

Your rights (GDPR / EU residents)

You have the right to:

• access a copy of your data
• correct inaccurate data
• delete your account ("right to be forgotten")
• export your data in a machine-readable format
• object to processing for marketing purposes
• lodge a complaint with your data protection authority

To exercise any of these, email support@dtcnative.com or use Settings → Delete account.

Cookies

We use first-party cookies for authentication only (your login session). No third-party tracking cookies.

Children

The service is not for anyone under 18. If you believe a minor has signed up, email us and we'll remove the account.

Changes

If we change this policy materially, we'll notify you by email at least 14 days before the change takes effect.

Contact

Questions, requests, complaints - email support@dtcnative.com.