Privacy Policy

Last updated: July 25, 2026

This policy explains what we collect, why, and the choices you have. TakeStand is the data controller for your account.

Data we collect

Account: email, username, hashed password, age-verification flag, profile photo, bio.
Content: debates you host or join, chat messages, speak requests, reports.
Financial: Sparks purchases, tips sent and received, withdrawal requests. Full card and bank numbers are handled by Stripe — we only store the last 4 digits and the payout metadata we need.
Device & usage: IP address, browser type, and basic analytics for security and reliability.

How we use it

Run the service — auth, live audio/video, chat, payouts.
Enforce the Terms and Community Guidelines (moderation, appeals, safety).
Prevent fraud and abuse.
Send transactional email (payout notices, appeals, security).

Sharing

We share the minimum necessary with:

Stripe — payments, payouts, tax and compliance.
LiveKit — real-time audio/video transport.
Our cloud provider — database, storage, and auth hosting.
Law enforcement — only when legally required (subpoena, imminent-harm reports, CSAM reports to NCMEC).

We do not sell personal data.

Your rights

You can access, correct, export, or delete your account data. Email privacy@takestand.app and we'll respond within 30 days. GDPR and CCPA residents have additional rights (right to object, right to opt out of sale — we don't sell — right to non-discrimination).

Retention

Account data is kept while your account is active. Deleted accounts are purged within 30 days, except records we're legally required to keep (payments, tax, safety reports).

Children

TakeStand is 18+. We do not knowingly collect data from anyone under 18. If we learn we have, we delete it and terminate the account.

Contact

Privacy questions: privacy@takestand.app.