Privacy Policy

We collect the following categories of data:

• Account data — your name, email address, password (stored hashed), and, if you use Google Sign-In, the basic profile information Google shares (name, email, avatar).
• Profile and content — your avatar, bio, and the posts, comments, courses, events, and other content you create or share in communities.
• Payment data — records of your transactions (amounts, dates, the community, and the payment method used). Full card numbers and bank credentials are handled by our payment providers, not stored by us; we keep limited details such as a card’s brand and last four digits, and the bank account you provide for payouts.
• Usage and device data — how you interact with the Service, plus technical information such as IP address, browser type, and device identifiers, collected through cookies and similar technologies.

We use your data to:

• provide, operate, and improve the Service;
• create and secure your account, and authenticate you when you sign in;
• process payments, issue invoices, calculate creator earnings, and make payouts;
• send you transactional messages and notifications (for example, about payments, memberships, and community activity);
• prevent fraud, enforce our Terms of Service, and comply with legal obligations;
• understand how the Service is used so we can improve it.

We share data only as needed to run Berrytap:

• With community creators — when you join a community, its creator can see your profile and your activity within that community.
• Payment providers — QPay and our card processor handle your payments and receive the data needed to complete them.
• Infrastructure providers — we use Supabase for database and authentication and Vercel for hosting; they process data on our behalf under their own security and privacy commitments.
• Legal and safety — we may disclose data when required by law, or to protect the rights, safety, and property of Berrytap, our users, or the public.

We do not sell your personal data.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand usage. Essential cookies are required for the Service to function; you can control non-essential cookies through your browser settings, though disabling some cookies may affect how the Service works.

We keep your data for as long as your account is active and as needed to provide the Service. We retain transaction and payout records for longer where required for accounting, tax, and legal purposes. When data is no longer needed, we delete or anonymize it.

We use technical and organizational measures — including encryption in transit, hashed passwords, and access controls at the database level — to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update much of your profile directly in your settings, or contact us to exercise these rights. To delete your account, use your settings or email us at the address below.

Berrytap is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Berrytap serves creators and members in Mongolia and beyond. Your data may be processed on servers located in other countries by our infrastructure and payment providers. Where required, we take steps to ensure your data receives an adequate level of protection.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you. Please review it periodically.

Questions or requests about your privacy? Email support@berrytap.com.