Privacy Policy

Privacy at a Glance

• A creator's published profile, storefront, listings, links, and other public content can be viewed and shared by anyone.
• Creators receive relevant buyer, subscriber, order, and booking information so they can fulfill offers and manage customer relationships.
• Stripe processes payments. Followrs keeps transaction records but does not store full payment card numbers.
• When a creator connects Google Calendar, Followrs checks busy times and creates or removes Followrs booking events as described below.
• You may request access, correction, or deletion by contacting us. Some records may remain when needed for fulfillment, security, disputes, taxes, or legal compliance.

Who This Policy Covers

This policy applies to creators who operate Followrs pages, visitors who browse those pages, buyers who purchase or tip, subscribers who submit their information, booking guests who schedule calls, and people who contact or otherwise interact with Followrs. A creator may have their own privacy obligations and policies for the information they receive through their storefront.

Information We Collect

• Account and profile information: Email address, username, authentication information, display name, biography, avatar, settings, and account preferences.
• Public content and uploads: Profile and storefront content, links, offer descriptions, prices, images, videos, files, testimonials, and other material a creator publishes or uploads. Published creator content may be public and searchable.
• Payments, orders, and sales: Stripe account IDs, checkout and session identifiers, order records, sale records, customer name and email, offer details, payment status, refund and dispute status, delivery records, and related metadata. Stripe, not Followrs, processes full payment card numbers.
• Subscribers: Email address, answers to creator-selected fields, submission source and timestamp, tags, and unsubscribe or suppression status.
• Bookings: The buyer's name, email, selected time, time zone, optional intake answer, payment status, booking and cancellation status, booking-management identifiers, Google event identifiers and links, and Google Meet links.
• Support and communications: Messages, attachments, contact details, and other information submitted by email or through support tools such as Crisp.
• Connections and integrations: Authorization grants, encrypted credentials, connection status, service identifiers, selected settings, and information exchanged when a creator connects Stripe, Kit, Google Calendar, Meta and Threads, or a connected AI client to Followrs.
• Device and usage information: IP address, browser and device type, operating system, referring page or campaign, cookies, pages and features used, interaction events, timestamps, and diagnostic or security logs.

How We Use Information

We use information to:

• Create, authenticate, secure, and support accounts
• Host public pages and deliver creator content and offers
• Route payments, fulfill purchases, maintain records, and address disputes
• Collect subscribers and support creator-directed customer communications
• Calculate booking availability and manage confirmations and cancellations
• Operate integrations and actions a creator requests
• Send transactional, service, support, and permitted marketing communications
• Measure performance and improve the Service
• Detect fraud, abuse, security incidents, and violations of our terms
• Comply with law and protect users, Followrs, and others

Google Calendar and Google API Data

Followrs uses the calendar.freebusy permission to request busy start and end times from a creator's primary Google Calendar so unavailable times are not offered to booking guests. Followrs does not use this request to read event titles, descriptions, locations, or attendee lists.

Followrs uses the calendar.events permission only to create and remove Followrs booking events on the creator's primary calendar. A created event may contain the offer title, buyer's name and email, selected time, optional intake answer, a booking-management link, a Followrs booking identifier, and a Google Meet link.

Followrs stores Google access and refresh credentials in encrypted form so availability checks and bookings can work while the creator is away. Followrs also stores the identifiers, links, and status needed to manage the booking. Free/busy ranges are processed to calculate available times and are not stored as copies of the creator's source calendar events.

Followrs does not sell Google user data, and we do not use Google user data for advertising, credit decisions, or generalized AI-model training. Followrs personnel do not read Google user data unless you give explicit consent for specific data to be accessed for support, access is necessary for a security or abuse investigation, access is required by law, or the data has been aggregated and anonymized for internal operations.

Followrs keeps Google Workspace API data separate from Store Assistant, our creator-authorized MCP connection. Raw, aggregated, anonymized, and derived Google Workspace API data—including Calendar availability, event data, event identifiers and links, Google Meet links, and Google OAuth credentials—is not made available through Store Assistant. Followrs does not send or disclose this data through Store Assistant to Anthropic, OpenAI, Claude, Claude Code, Codex, another connected AI client, or any other AI/ML model provider. Followrs does not use this data to create, train, fine-tune, evaluate, or improve any generalized or foundational AI/ML model.

Disconnecting Google Calendar asks Google to revoke Followrs's grant and removes the stored access and refresh credentials from active systems. Existing Google Calendar events and necessary Followrs booking, transaction, security, and legal records may remain until they are deleted through the applicable workflow or are no longer needed.

Google User Data Policy and Limited Use: Followrs's use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Disclose Information

• Creators: Creators receive relevant buyer, subscriber, order, and booking information for fulfillment and customer management. Their use of that information is also subject to their own obligations.
• Infrastructure and operations: Supabase supports database, authentication, and storage functions; Vercel hosts and delivers the web application; and Crisp supports customer-service communications.
• Payments and communications: Stripe processes payments and connected-account services. Resend sends transactional and service emails. Kit supports Followrs communications and, when selected by a creator, subscriber syncing and creator-directed email workflows.
• Creator-selected integrations: Google receives Calendar and Meet instructions for native bookings. Meta and Threads process authorization and connected Threads account, post, and engagement data when a creator uses that integration. Data sent to a creator-selected service is also governed by that service's policies and the creator's use of it.
• Analytics: Amplitude processes privacy-limited product events so we can understand and improve signup, onboarding, dashboard, subscription, and creator-activation flows. We configure these events to avoid sending message text, payment credentials, access tokens, uploaded file contents, or checkout answers.
• Connected clients: Store Assistant is a Followrs-hosted MCP server that lets a creator independently choose and authorize a third-party MCP-compatible client, such as Claude, Claude Code, Codex, or another compatible app. Creators use their own third-party accounts and plans. Followrs does not provide or control those accounts, plans, credentials, or provider data settings. A connected client receives only the Followrs store information returned by the creator-authorized MCP tools and may perform only the actions those tools make available. Google Workspace API data is excluded from this connection. The creator should review the selected client's privacy and security practices for non-Google Followrs data.
• Legal, safety, and business events: We may disclose information when reasonably necessary to comply with law, enforce agreements, prevent fraud or harm, protect rights and safety, or complete a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate confidentiality and notice requirements.

Retention and Deletion

We keep information only for as long as reasonably necessary for the purposes in this policy. The period depends on the kind of information and why we need it:

• Account, profile, storefront, and uploaded information is generally kept while the account or content remains active and as needed to provide the Service.
• Order, sale, delivery, subscription, payment, booking, refund, dispute, tax, and related records may remain as needed for fulfillment, accounting, legal compliance, fraud prevention, and dispute resolution.
• Subscriber suppression and unsubscribe records may remain so communication choices continue to be honored.
• Support, diagnostic, and security logs may remain as needed to resolve requests, investigate incidents, maintain the Service, and enforce agreements.
• Connected-service credentials remain while the connection is active and are removed from active systems through the applicable disconnect or deletion workflow. Records created through that service may have separate retention requirements.
• Deleted information may remain temporarily in protected backups or where retention is required or permitted by law, and is removed or isolated through our normal backup lifecycle.

To request account or personal-information deletion, contact us using the information below. We may need to verify your identity and may retain or deny deletion of particular records where permitted or required by law.

Data Storage and Security

We use safeguards designed to protect information, including TLS encryption in transit, encryption of sensitive stored data, encrypted OAuth credentials, authentication, access controls, and security features provided by our infrastructure and service providers.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for protecting your account credentials and notifying us of suspected unauthorized use.

Cookies, Analytics, and Tracking

We use essential cookies and similar technologies for authentication, security, preferences, attribution, and core features. We also use privacy-limited analytics, including Amplitude where enabled, to understand how people find and use Followrs and where product flows need improvement. We do not currently use third-party advertising cookies or tracking pixels.

If session replay is enabled, it is limited to approved logged-in creator dashboard areas and subject to consent and masking controls. Public storefront, checkout, delivery, subscriber, sales, billing-sensitive, and administrator pages are not replayed. Browser controls can block cookies, but some parts of the Service may stop working correctly.

Some browsers send a Do Not Track (“DNT”) signal. Followrs does not currently change its practices in response to DNT because there is no agreed industry standard for interpreting it. We honor browser-based opt-out signals where applicable law requires them.

Your Privacy Rights and Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information, and to object to or restrict certain processing. You may also:

• Unsubscribe from marketing emails using the link in the message
• Ask a creator to update how they use information they received from you
• Disconnect a connected service from the applicable Followrs control
• Adjust browser cookie settings

Contact us to make a request. We may verify your identity, ask an authorized agent for proof of authority, and apply exceptions permitted by law. We will not discriminate against you for exercising an applicable privacy right.

Children's Privacy and Account Eligibility

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Creator accounts, payment connections, Calendar connections, and sales tools are intended for adults who can enter a binding contract. Other users must have the legal capacity to use the Service or the involvement of a parent or guardian where required. Contact us if you believe a child has provided information in violation of this policy.

International Data Processing

Followrs is based in the United States. We and our providers may process information in the United States and other countries, where privacy laws may differ from those in your location. Where required, we use appropriate measures for international data processing and transfers.

Changes to This Policy

We may update this Privacy Policy as the Service, our practices, or legal requirements change. We will post the updated policy here, change the “Last updated” date, and provide additional notice when required or when a change is material.

Contact Us

For privacy questions or requests, contact: