Privacy Policy

This policy covers the EISO website, app and service and related communications. It explains what we collect, why, who we share it with, how long we keep it and your choices. It does not cover third-party sites or services, such as social platforms linked from profiles or payment providers, which have their own policies. In short: public profiles are public, payments run through Stripe, we don't sell your personal information, and you can delete your account in settings.

• Identity and contact: name, display name, username, email address, phone number and similar contact details.
• Account and authentication: sign-in method or provider, account identifiers, and authentication and security events. Passwords are handled by our authentication provider in hashed form; EISO staff cannot read them.
• Public creator profile: bio, headline, photo, social handles and links, follower count, platforms, offer types, minimum offer and similar details.
• Offers and transactions: offer title and details, requested interaction, amount, duration, timing, status, counteroffers, acceptance, cancellation, completion, dispute and refund information, and the parties involved.
• Communications: support requests, account and transaction messages, email and SMS content where EISO sends or is party to them, delivery status, timestamps, opt-in and opt-out records, and routing metadata.
• Payments and payouts: payment-provider customer, account and payment identifiers, amounts and statuses, authorization, capture, refund, chargeback, transfer and payout information, fee calculations and reconciliation records. Stripe and other processors handle card, bank and payout identity details; EISO does not store full card or bank account numbers.
• Payout onboarding and verification: we may receive account or verification status and limited compliance information from providers. Identity documents, tax and bank details are generally collected directly by payment or verification providers. EISO does not currently conduct its own identity verification.
• Technical and usage: IP address, browser, device and operating system, pages and events, timestamps, referral URLs, approximate location derived from IP, security and fraud signals, and server and error logs.
• Cookies, session and local storage: used to keep you signed in and the service working. Offer drafts and similar in-progress information may be saved in your browser's local storage so you don't lose progress.
• Information about others you provide: if future features let you add invitees, scheduling participants, collaborators or other contacts, you must have the authority and legal basis to share their information.
• Integrations and social sign-in: if you choose to use them, the information the provider shares and you authorize.

Public creator profile fields are visible to anyone and may be indexed by search engines, shared on social media, cached, or copied by others — and we cannot fully control copies made by others. Do not put sensitive information on a public profile.

• Directly from you.
• From the other party to an offer or transaction.
• Automatically when you use the service.
• From payment, authentication, communications and infrastructure providers.
• From integrations you choose to connect.
• From public sources, if in the future we reasonably use them to confirm public profile or social links.

• Create and manage accounts and profiles, and display public profiles.
• Create, negotiate, process and fulfill offers and transactions.
• Handle payment authorization, capture, payout holds and release, payouts, refunds, disputes and reconciliation.
• Send account and transaction notifications by email, in the app and, if introduced, by SMS.
• Provide support.
• Protect safety and security and prevent fraud and abuse.
• Meet legal, compliance, tax and accounting obligations, and enforce our Terms.
• Operate, debug, analyze and improve the product, and personalize the basic experience.
• Communicate service updates.
• Marketing, only where permitted and with consent where required.
• Create aggregated or de-identified data.

EISO may use third-party email and SMS delivery providers. To send messages we use your email address or phone number, the message content or template, delivery events, timestamps, carrier or provider status, and opt-in and opt-out records as needed. EISO does not currently send SMS.

We distinguish service and transactional messages (about your account, offers, payments and security) from promotional ones. Promotional emails or texts are sent only as permitted by law and consent rules. You can unsubscribe from optional marketing emails, or reply STOP to optional texts where SMS is supported. Essential account, security and transaction notices may still be sent through available channels.

Stripe and any other payment processors we use receive card, bank, identity, tax and payout information as needed to process payments and payouts. EISO receives limited tokens, identifiers, statuses and reconciliation data. This includes information related to holds, captures, refunds, disputes and any future payout hold or release flows. Processors also handle data independently under their own privacy policies, such as Stripe's Privacy Policy.

• With the other party to an offer or transaction, to the extent needed.
• With the public, for public profile content.
• With Stripe and other payment, payout and verification providers.
• With Supabase for authentication, database and storage.
• With hosting, cloud, content delivery and security providers.
• With email, SMS and other communications providers.
• With analytics providers, if enabled.
• With professional advisers such as lawyers, accountants, auditors and insurers.
• With law enforcement, regulators or courts when legally required or to protect rights and safety.
• In a merger, acquisition, financing, reorganization or sale of assets.
• With service providers under appropriate contractual restrictions where applicable.
• At your direction or with your consent.

EISO does not currently sell personal information for money and does not currently use personal information for cross-context behavioral or targeted advertising. If that changes, we will update this policy and provide any legally required choices before using information that way.

We keep information as long as reasonably needed to provide the service, maintain transaction integrity and security, meet legal, compliance, tax and accounting obligations, resolve disputes, prevent fraud and enforce our agreements.

• When you delete your account, your profile, sign-in account, photo and related live account data are removed, open offers are cancelled and open card holds are released where applicable.
• Historical financial, transaction, offer and audit records may be kept in anonymized or de-identified form, or in identifiable form where necessary for legal, accounting, tax, fraud, dispute or compliance purposes.
• A deleted username is held for 30 days before anyone else can claim it.
• Payment processors may retain data under their own policies and legal duties.
• Information in your browser's local storage stays on your device until cleared by the app or your browser.

We use reasonable administrative, technical and organizational safeguards, such as access controls and private storage for photos. No system is perfectly secure. Please use a strong, unique password and keep your login details safe.

• Edit your profile and settings at any time.
• Delete your account in settings.
• Unsubscribe from optional marketing emails, or reply STOP to optional texts where SMS is supported.
• Manage cookies and browser storage through your browser where available.
• Depending on where you live, you may have rights to access, correct, delete or port your information, to restrict or object to certain processing, to opt out of sale or targeted advertising if applicable, and to appeal a decision on your request.

Send requests through our contact page. We may need to verify your identity, and we will handle requests from authorized agents where the law requires. Some records may be exempt from deletion because of legal or transaction obligations.

We collect the categories of information listed above for the business and service purposes described in this policy. EISO currently does not sell personal information or share it for cross-context behavioral advertising. Sensitive financial and identity information is used only as needed for the service, legal and compliance purposes, and is often handled directly by payment processors. Residents of states with applicable privacy laws may have the rights described in “Your choices and rights.”

EISO and its providers may process information in the United States or other countries. Where required, we use appropriate safeguards for those transfers.

EISO is for people 18 and older and is not directed to children. If you believe a child has provided us information, contact us through our contact page and we will take appropriate steps.

Profiles may link to social platforms and other sites. EISO is not responsible for the independent privacy practices of those platforms or providers.

If EISO is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

We will update the effective date when this policy changes and notify you of material changes as appropriate. See also our Terms of Service.

Privacy questions or requests? Reach us through our contact page.