Privacy Policy

1. Who we are

Spotlightly is operated by Tahoma Systems LLC, a Washington state LLC. This Privacy Policy explains how we collect, use, and protect your personal information. Contact us at privacy@spotlightly.app with any questions.

2. Information we collect

Account information. When you create an account: email address, password (hashed — we never store plaintext passwords), and if you're a creator, your display name and handle.

Payment information. We do not store credit card numbers. Payment processing is handled by Stripe and CCBill. We store transaction IDs, amounts, and subscription status for your records.

Content. Posts, captions, images, and videos you upload to the platform.

Identity documents. For Backstage (adult content) creators, age verification is conducted by Veriff. We receive a pass/fail result — we do not store copies of your ID. 2257 records (legal name, date of birth, ID type) are stored securely and are only accessible to compliance staff.

Usage data. Page views, feature usage, and error logs for platform improvement. We do not sell this data.

Communications. Messages sent through the platform's messaging system.

3. How we use your information

• To operate and provide the platform
• To process payments and payouts
• To send transactional emails (receipts, password reset, account notices)
• To enforce our Terms of Service and Content Policy
• To comply with legal obligations
• To improve the platform through aggregate, anonymized analytics

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Third parties

Stripe — payment processing. Stripe Privacy Policy

CCBill — adult content payment processing. CCBill Privacy Policy

Supabase — database and authentication. Hosted in AWS US-East.

BunnyCDN — media hosting and delivery (Bunny.net)

Veriff — age/identity verification for Backstage creators

Resend — transactional email delivery

5. Data retention

Account data is retained while your account is active. If you delete your account, your profile and posts are removed within 30 days. Payment records and 2257 compliance records are retained for 7 years as required by law. Messages may be retained for up to 2 years for trust and safety purposes.

6. Your rights

Access and portability. You can request a copy of your data by emailing privacy@spotlightly.app.

Correction. You can update most account information directly in your dashboard settings.

Deletion. You can delete your account in dashboard settings. Some data may be retained as described above.

Opt-out of communications. You can unsubscribe from non-transactional emails via the link in any email we send.

7. California residents (CCPA)

California residents have the right to know what personal information we collect, to delete personal information, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@spotlightly.app.

8. European residents (GDPR)

If you are located in the European Economic Area, you have additional rights including the right to access, rectify, erase, restrict, or object to processing of your personal data. Our legal basis for processing is contract performance (operating the platform you've signed up for) and legitimate interests. To exercise your rights, contact privacy@spotlightly.app. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

We use strictly necessary cookies for authentication (session management). We do not use third-party tracking cookies or advertising cookies.

10. Security

We use industry-standard security measures including encryption in transit (HTTPS), encrypted passwords, and access controls. No system is perfectly secure. If you discover a security vulnerability, please report it to security@spotlightly.app.

11. Children

Spotlightly is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, contact us immediately.

12. Changes

We may update this policy from time to time. We will notify you of material changes by email. Continued use after changes constitutes acceptance.

13. Contact

privacy@spotlightly.app
Tahoma Systems LLC · Black Diamond, Washington, USA