1. Data Collection
We collect personal data that you provide when creating an account, placing orders, or interacting with our platform. This includes your email address, display name, delivery addresses, and payment information. We also collect usage data such as pages visited, streams watched, and interactions with creators.
2. Cookies
We use essential cookies to maintain your session and authentication state (pb_auth cookie). These cookies are necessary for the platform to function and cannot be disabled. We do not use third-party tracking cookies for advertising purposes.
3. Third-Party Services
We use the following third-party services to operate the platform:
- Stripe — Payment processing for orders, tips, and subscriptions. Stripe collects and processes payment details in accordance with their own privacy policy.
- LiveKit — Live streaming infrastructure. LiveKit processes audio and video data during live streams.
- PocketBase — Backend database for user data, orders, and platform content. Data is stored on our own servers.
- Meilisearch — Search functionality. Search queries and indexed content are processed on our own servers.
4. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access — You can request a copy of your personal data.
- Right to rectification — You can request correction of inaccurate data.
- Right to erasure — You can request deletion of your personal data.
- Right to restriction — You can request restriction of processing.
- Right to data portability — You can request your data in a machine-readable format.
- Right to object — You can object to processing based on legitimate interests.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Order and transaction data is retained for legal and accounting purposes as required by applicable law. You may request deletion of your account and associated data at any time.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS/SSL.
7. Contact
For privacy-related inquiries or to exercise your rights, contact us at: hello@onim.cc