Privacy Policy

1. Who controls your data

MyContent.Space is the controller for personal data processed to operate this service. Privacy requests can be sent to privacy@mycontent.space.

2. Data we collect

• Account data, including email addresses, wallet addresses, login providers, roles, and session identifiers.
• Profile and content data, including creator usernames and biographies, fan nicknames and avatars, categories, locations, photos, posts, themes, social links, and private paid media.
• Transaction data, including product and subscription selections, amounts, payout and payer wallet addresses, public blockchain transaction signatures, confirmation status, and content entitlements. We do not receive or store wallet private keys.
• Relationship and safety data, including follows, reports, verification records, consent records, moderation decisions, and audit logs.
• Technical data, including IP addresses used for security and rate limiting, request timestamps, device or browser information supplied in ordinary web requests, and error logs. We may derive and retain an approximate country from an IP address for account security and administrative presence information; this feature does not retain the exact IP address.
• AI feature data, including prompts or profile details submitted for suggestions or avatar creation, photo dimensions and identifiers used for layout assistance, provider usage, and the result you choose to apply.

3. How we use data

We use personal data to authenticate users, maintain accounts, publish creator pages, save drafts, deliver uploaded media, verify SOL payments, issue and enforce paid-content access, support follows and posts, prevent abuse, investigate reports, provide support, improve reliability, and comply with legal obligations. Optional analytics or marketing technologies will only be activated when permitted by your saved cookie preferences.

4. Legal bases

Depending on the activity and your location, processing is based on performing our contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent for optional technologies or other activities where consent is required. You may withdraw consent at any time through Cookie settings or by contacting us.

5. Service providers and recipients

We use service providers to run the platform, including Supabase for authentication, database, and storage; Vercel for hosting and delivery; Resend for login email delivery; and configured AI providers such as DeepSeek when you request an AI-assisted feature. These providers process data under their own contractual and security terms. Administrators may access data when needed for support, security, moderation, and legal compliance.

When you open a creator’s external social link, the destination platform receives information under its own privacy policy.

6. Public information

A published creator page is publicly accessible. Its username, display name, biography, category, selected location, photos, posts, follower count, and social links may be seen and copied by visitors or indexed by search engines. Draft pages remain unpublished until the creator chooses to publish.

7. International transfers

Our providers may process data in countries outside your own. Where required, we use recognised transfer mechanisms and contractual safeguards. You may contact us for more information about safeguards relevant to your data.

8. Retention

We keep account and creator data while the account is active and as needed to provide the service. Login codes and security challenges are short-lived and are deleted or made unusable after expiry or use. We retain moderation, audit, security, and transaction-related records only as long as reasonably necessary for safety, dispute handling, legal obligations, and enforcement. Backup copies may remain for a limited period before deletion cycles complete.

9. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or an objection to certain processing. You may withdraw consent without affecting earlier lawful processing and may complain to your local data protection authority. We may need to verify your identity before completing a request. Send requests to privacy@mycontent.space. See the European Commission’s overview of GDPR rights.

10. Security and children

We use access controls, row-level database security, encrypted transport, limited administrative access, and other safeguards appropriate to the service. No system is completely secure. MyContent.Space is intended only for adults aged 18 or older, and we do not knowingly permit accounts for children.

11. Cookies and changes

Our Cookie Policy explains browser storage and consent controls. We may update this policy as the product or applicable requirements change. Material revisions will carry a new effective date and, when appropriate, an in-product notice.