Privacy Policy

This Privacy Policy describes how Buttons (“Buttons”, “we”, “us”, “our”) collects and handles personal information when you use our website, mobile apps, and desktop apps (the “Service”). It applies to everyone who uses Buttons — fans, creators, and visitors alike.

2.1 Information You Give Us

• Account data: email or phone number, username, password (stored hashed), display name, date of birth.
• Profile data: bio, avatar, banner, pronouns, links, and any content you publish.
• Verification data (for creators): government-issued ID, selfie verification, and related documents, processed through our verification partners. This is used to confirm your identity and age and to comply with law. We store the verification result and limited metadata; the full documents are held securely by our verification partner under strict retention limits.
• Payment data: billing address, card last four digits, and transaction history. Full card numbers are processed by our PCI-compliant payment partners — we do not store them.
• Communications: messages you send to us (support, appeals, DMCA notices, etc.) and any content you send through our messaging features.

2.2 Information We Collect Automatically

• Device & technical data: IP address, device type, OS, browser, language, screen resolution, and crash reports.
• Usage data: pages visited, features used, posts viewed, session times, referrer URLs and approximate location (derived from IP).
• Cookies and similar technologies: for sign-in, preferences, security, and analytics — see our Cookie Notice.

2.3 Information From Third Parties

We may receive information from identity verification providers, payment processors, fraud-prevention partners, analytics providers, and from third-party services you choose to connect (for example, sign-in with Apple, Google, or a social login). We only receive what is needed for the service we've asked them to perform.

We use personal information to:

• Create and manage your account and provide the Service.
• Verify your identity and age, detect fraud, prevent abuse, and keep the platform safe.
• Process payments, pay out earnings, handle refunds and chargebacks, and keep financial records.
• Personalize your experience, recommend creators or content, and communicate with you about the Service.
• Respond to your requests, send important notices (e.g. Terms or Privacy updates), and provide customer support.
• Measure performance, debug issues, and improve the Service.
• Comply with law and enforce our Terms.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) performance of a contract with you; (b) our legitimate interests in operating, securing and improving the Service; (c) your consent (which you can withdraw at any time, without affecting earlier processing); and (d) compliance with legal obligations, including around tax, payments, and content that is unlawful.

We never sell your personal information. We share it only in these situations:

• With other Users: your profile, posts, and anything else you choose to make visible are shared according to your privacy settings.
• With service providers: cloud hosting, payments, analytics, verification, fraud prevention, email delivery, and customer-support tools. They're contractually required to protect your information and only use it for our instructions.
• For legal reasons: to comply with law, respond to valid legal requests (subpoenas, court orders), enforce our Terms, protect the rights, property, or safety of Users and the public, and investigate fraud or other wrongdoing.
• Business changes: in connection with a merger, acquisition, or sale of assets, in which case we'll notify you.
• With your consent — for anything not covered above.

Buttons is a global service and your information may be processed in countries different from the one you live in. When we transfer personal data from the EEA, UK or Switzerland to other countries, we rely on safeguards such as the European Commission's Standard Contractual Clauses or applicable adequacy decisions.

We keep personal information only for as long as needed for the purposes set out in this policy. Some data (for example, transaction records and verification outcomes) is kept longer to comply with tax, accounting, and anti-fraud obligations. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to keep it.

We use industry-standard technical and organizational measures — encryption in transit and at rest, access controls, logging, and internal training — to protect your information. No system is 100% secure, but we work hard to reduce risk and respond quickly if something happens. Please also help us by using a strong, unique password and keeping your devices secure.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information; to portability of your data; and to withdraw consent. You can exercise many of these rights directly in Settings → Privacy. We'll respond within the timeframes required by applicable law. You can also lodge a complaint with your local data-protection authority.

California residents: under the CCPA/CPRA, you have the right to know what we collect, to delete it, to correct it, and to limit use of sensitive personal information. We do not “sell” personal information or share it for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA.

Buttons is not intended for people under 18, and creator features require age and identity verification. We don't knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please report it immediately through the in-app reporting tools so we can investigate.

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date above and, for material changes, give you more notice. Continued use of the Service after an update means you accept the revised Policy.