Privacy Policy

This Privacy Policy explains how Liker Digital ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our website and services. We take your privacy seriously and are committed to being transparent about our data practices.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

• Name — used to personalize your account and communications.
• Email address — used for authentication, order notifications, and account recovery.
• Password — stored in hashed form. We never store or have access to your plaintext password.

1.2 Order Data

When you place an order, we store:

• The social media link you provide (e.g., an Instagram post URL, a YouTube video URL).
• Service type, quantity, price paid, and order status.
• Timestamps of when orders were created and updated.

We do not ask for or store your social media account passwords. We only need a public link to your content.

1.3 Payment Information

Wallet deposits are processed through Stripe. When you make a payment:

• Your card number, expiry, and CVC are sent directly to Stripe and never touch our servers.
• We receive and store: Stripe session IDs, payment intent IDs, the deposit amount, and the email address associated with the payment.
• We store transaction records (deposit amount, balance before and after) to maintain your wallet history.

1.4 Session & Technical Data

When you log in and use the platform, we collect:

• Session tokens — to keep you authenticated across page loads. Sessions expire after 7 days of inactivity.
• IP address — logged with each session for security and fraud prevention.
• User agent — your browser and device type, stored with sessions.

1.5 Information We Do NOT Collect

• Social media account passwords or login credentials.
• Personal messages, private content, or data from your social media accounts.
• Location data beyond what your IP address reveals.
• Data from contacts, phone books, or other apps on your device.

2. How We Use Your Information

• Account management — to create and maintain your account, process authentication, and handle password resets.
• Order fulfillment — to send your order details (service type, link, quantity) to our fulfillment providers so they can deliver the service you purchased.
• Payment processing — to credit your wallet when a deposit is confirmed by Stripe, and to debit your wallet when you place orders.
• Transaction records — to provide you with a history of deposits, purchases, and refunds in your dashboard.
• Security — IP addresses and session data are used to detect unauthorized access and prevent fraud.
• Communication — to send you order confirmations, payment receipts, service updates, and respond to support inquiries.

3. Data Shared with Third Parties

3.1 Fulfillment Providers

To deliver the services you order, we share the following with our third-party fulfillment partners:

• The social media link you submitted with the order.
• The service type and quantity requested.

We do not share your name, email address, IP address, or any other personal identifiers with fulfillment providers. They receive only what is necessary to deliver the service.

3.2 Stripe (Payment Processor)

Stripe processes all payments and receives the information necessary to complete your transaction (card details, email, billing info). Stripe's handling of your data is governed by their Privacy Policy. Stripe is PCI DSS Level 1 certified, the highest level of payment security certification.

3.3 No Data Sales

We do not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertisers. Period.

3.4 Legal Obligations

We may disclose your information if required by law, subpoena, court order, or government regulation. We may also disclose information if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4. Data Storage & Security

• Account data and order records are stored in a MySQL database with encrypted connections.
• Passwords are hashed using industry-standard algorithms — we cannot see or recover your password.
• Session tokens are stored as secure, HTTP-only cookies.
• All connections to our platform use HTTPS/TLS encryption.
• We use connection pooling with limited concurrent database connections to prevent unauthorized access.

While we implement reasonable security measures, no online service is 100% secure. We cannot guarantee absolute security of your data and encourage you to use a strong, unique password for your account.

5. Data Retention

• Account data — retained as long as your account is active. If you request account deletion, we will remove your personal data within 30 days.
• Order records — retained for a minimum of 12 months after order completion for dispute resolution and accounting purposes, then archived or anonymized.
• Transaction records — retained for a minimum of 24 months to comply with financial record-keeping requirements.
• Session data — automatically deleted when the session expires (7 days from last activity).

6. Cookies

We use a minimal set of cookies:

• Session cookie (better-auth.session_token) — required for authentication. Without this cookie, you cannot stay logged in. This is a strictly necessary cookie and does not require consent under most privacy regulations.

We do not use advertising cookies, tracking pixels, analytics cookies, or any third-party cookies for marketing purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate data. You can update your name and email directly in your profile settings.
• Deletion — request that we delete your account and associated personal data.
• Data portability — request your data in a machine-readable format.
• Restriction — request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

Liker Digital is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will promptly delete their account and associated data.

9. International Users

If you access the Service from outside the country where our servers are located, your data will be transferred across international borders. By using the Service, you consent to this transfer. We apply the same level of data protection regardless of where you are located.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on our website before the changes take effect. Minor changes may be made without notice. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, reach out to us:

• Email: [email protected]