Our Commitment to Your Privacy
FairFate is committed to protecting your personal data. This policy explains how we collect, use, store, and safeguard your information.
Data We Collect
Account Information
- Email address (required for account creation)
- Username and display name
- Password (encrypted, never stored in plain text)
- Profile information (optional: bio, avatar, social links)
Purchase and Transaction Data
- Order history and product downloads
- Payment information (processed securely - see Payment Security section)
- Billing address (for tax compliance and fraud prevention)
- Purchase preferences and wish lists
Creator Data (For Sellers)
- Business information (name, tax ID, business address)
- Bank account details (for payouts, encrypted and tokenized)
- KYC documents (identity verification for compliance)
- Sales analytics and revenue data
Usage Data
- Device information (browser type, OS, IP address)
- Activity logs (pages visited, features used, timestamps)
- Download history and library management
- Performance metrics (for service improvement)
Communication Data
- Support tickets and correspondence
- Email preferences and notification settings
- Review and rating submissions
How We Use Your Data
Essential Services
- Account management and authentication
- Order processing and delivery
- Payment processing and fraud prevention
- Customer support and dispute resolution
Service Improvement
- Analytics to understand user behavior (anonymized where possible)
- A/B testing for feature improvements
- Bug tracking and error reporting
- Performance monitoring
Marketing (With Your Consent)
- Product recommendations based on your interests
- Promotional emails (opt-out anytime)
- Creator updates for products you own
- Platform announcements and feature updates
Legal Compliance
- Tax reporting and regulatory requirements
- Anti-money laundering (AML) checks for creators
- Dispute resolution and chargebacks
- Law enforcement requests (only with valid legal process)
How We Protect Your Data
Technical Safeguards
- Encryption in transit for all data transmission
- Encryption at rest for sensitive data (passwords, payment info, KYC documents)
- Database access controls with role-based permissions
- Security monitoring and best practices
Operational Safeguards
- Access controls - data access requires authorization and user consent where applicable
- Audit logging - all data access is logged and monitored
- Incident response plan - 72-hour breach notification commitment
- Data minimization - we only collect what we need
- Automatic data deletion - inactive accounts purged after 3 years (with notice)
Infrastructure Security
- Cloud hosting with enterprise-grade security
- Rate limiting and traffic controls
- Malware scanning for all file uploads
- Automated backups - encrypted and managed by infrastructure provider
- Geographic data residency - US data centers
Your Privacy Rights
Access and Portability
- Download your data anytime from Account Settings
- Request data copy via martin@fairfate.com (provided within 30 days)
- Export purchase history in JSON or CSV format
Correction and Deletion
- Update your profile anytime in Account Settings
- Request data correction if information is inaccurate
- Delete your account (right to be forgotten - see Data Retention section)
Control and Consent
- Opt-out of marketing emails (account notifications still sent)
- Manage cookie preferences in our Cookie Policy
- Withdraw consent for data processing (may limit service availability)
- Object to automated decisions (contact martin@fairfate.com for manual review)
Additional Rights
We don’t sell your personal data. You may use authorized agents to exercise your privacy rights on your behalf. Contact us at martin@fairfate.com for any privacy-related requests.
Data Retention
- Active accounts: Data retained while account is active
- Inactive accounts: 3-year retention, then deleted (with 60-day notice)
- Purchase records: 7 years (tax compliance requirement)
- Payment data: Tokenized data retained per payment processor policies
- KYC documents: Retained per AML/KYC compliance (typically 5-7 years)
- Audit logs: 12 months for security monitoring
Third-Party Sharing
We never sell your data. We only share data with:
Service Providers
- Payment processing (secure payment transactions)
- Database hosting (data storage and management)
- Email services (transactional emails and notifications)
Legal Requirements
- Law enforcement (valid subpoena or court order required)
- Tax authorities (creator income reporting)
- Regulatory agencies (AML/KYC compliance)
Business Transfers
- Mergers or acquisitions (users notified 30 days in advance)
- Asset sales (privacy commitments transfer to new owner)
Cookies and Tracking
Essential Cookies
- Authentication (session management)
- Security (CSRF protection)
- Preferences (language, theme settings)
Analytics Cookies
- Usage tracking (anonymized where possible)
- Performance monitoring (error tracking, latency metrics)
- A/B testing (feature experiments)
Optional Cookies
- Marketing (disabled by default, requires consent)
- Social media (share buttons, disabled by default)
Children’s Privacy
FairFate is not intended for children under 13. We do not knowingly collect data from children. If we discover a child’s account, we will:
- Delete the account immediately
- Notify the parent/guardian (if contact info available)
- Purge all associated data within 48 hours
International Transfers
FairFate is based in the United States. If you access our service from outside the US:
- Your data may be transferred to US servers
- You consent to international transfer by using our service
Data Breach Notification
In the event of a data breach:
- 72-hour notification to affected users
- Immediate remediation and security patching
- Transparent communication about what data was affected
- Regulatory notification as required by law
Changes to This Policy
- Material changes: 30-day email notice before taking effect
- Minor updates: Posted on this page with “Last Updated” date
- Continued use after changes indicates acceptance
- Object to changes: Contact us within 30 days to discuss or delete account
Contact Us
Email: martin@fairfate.com
Response times:
- General inquiries: We aim to respond within 5 business days
- Data requests: Within 30 days (legally required)
FairFate takes your privacy seriously. This policy is reviewed annually and updated as needed to reflect our practices and legal requirements.