Privacy Policy

This Privacy Policy describes how Community Platform ("we," "us") collects, uses, shares, and protects information when you use our website, apply as an expert or creator, book consultations, subscribe to Kindra memberships, or otherwise interact with the Platform. By using the Platform, you agree to the collection and use of information as described here.

Account information: name, email address, and password (or wallet address, if you connect a crypto wallet instead of creating a password-based account).

Application information: for experts and creators, we collect professional title, category, bio, session rates or Kindra tier pricing, social media links, and payout details (bank and debit card details are collected directly by Stripe, not by us). Applications submitted before September 16, 2026 may also include a crypto wallet address, which we continue to store with that application.

Identity verification data: government-issued identification, collected and processed directly by Stripe at payout-account onboarding as described in Section 4. We do not store copies of ID documents ourselves.

Profile images: profile pictures and cover images you upload, stored in our cloud storage provider.

Payment information: for card payments, Stripe processes and stores your payment details. We do not receive or store full card numbers. We do not accept payment in crypto. If you connect a wallet to sign in, we store its public address, and any on-chain activity involving it is inherently public (see Section 5).

Session and claim content: messages you send in text sessions, documents you upload for review, and claims you file under the Buyer Protection Policy, including the evidence you attach. Voice and video sessions take place in rooms hosted by Jitsi Meet, a third-party video service. The Platform does not record them.

AI twin conversations: if you chat with a creator's AI twin, the text of your messages is sent to our AI service providers to generate a reply, and reply text may be sent to a speech provider to produce the twin's voice. If you use voice input, your browser converts your speech to text, which may involve your browser vendor's speech service; the Platform receives only the text. We record usage counts for these conversations, not their text.

Voice recordings and face photos from creators: a creator who chooses a voice twin uploads a recording of their own voice, which we send to Cartesia to create a synthetic voice. A creator who chooses a video twin uploads a photo of their own face, which we send to Simli to create a video avatar. This happens only after the creator gives consent in the product, and that consent is recorded. We do not keep the recording or the photo in our own systems; we keep the provider's reference to the resulting voice or avatar. The provider keeps the voice or avatar it creates. When a creator retires their twin, we ask Cartesia to delete the synthetic voice; deletion of the video avatar at Simli is requested separately and is not automatic. A voice model or face image of this kind may be treated as biometric information under some laws.

Records from discontinued programs: Community Platform ended its Bitcoin rewards program and its USDC payout option on September 16, 2026. If you took part in either before then, we still hold the records created at the time, which can include a wallet or payout address, reward amounts accrued, and payout transaction references.

Usage data: pages visited, features used, device and browser type, and general access logs, collected automatically as you use the Platform. This includes Vercel Web Analytics, which does not use cookies, and error reports sent to Sentry, which are configured not to include cookies, request bodies, or authorization headers.

To protect your privacy and minimize the data we hold, do NOT submit sensitive personal information anywhere on the Platform. This includes AI twin chats (text or voice), video sessions with experts, messages, and form fields. Sensitive information means, for example: health, medical, or mental-health details; financial account, card, or bank numbers; passwords or security credentials; government identifiers such as Social Security, passport, or driver's-license numbers; biometric data; and personal information about other people. The one exception is the recording of their own voice or photo of their own face that a creator deliberately provides, with consent, to build their own AI twin, as described in Section 2.

Community Platform is a general consumer platform. It is NOT a healthcare provider, is NOT a HIPAA covered entity or business associate, and does not intend to receive protected health information (PHI). Experts on the Platform provide general information and are not a substitute for licensed professional, medical, legal, or financial advice. Do not share PHI with them or with any AI twin.

If you need to share such information to receive a professional service, do so through that professional's own compliant channel, not through the Platform. If you believe you have submitted sensitive information by mistake, contact us (Section 13) and we will help remove what we are able to remove (note the blockchain and third-party limits in Sections 5 and 8).

We use collected information to: create and maintain your account; process applications to become an expert or creator; verify identity and age eligibility; facilitate bookings, subscriptions, and payments; operate AI twins, including creating a creator's synthetic voice or video avatar at that creator's request; host session rooms; monitor errors and site performance; communicate with you about your account, applications, or transactions; detect and prevent fraud; comply with legal and regulatory obligations; and improve the Platform.

Experts and creators must complete identity verification before they can receive payment. Verification is performed by Stripe as part of payout-account onboarding (Stripe Connect), which collects government-issued identification and related information directly from you and processes it under Stripe's own privacy and data handling standards. Community Platform receives only the resulting status. Whether verification is complete and payouts are enabled. Together with account reference identifiers. We do not receive, view, or store copies of your ID document or selfie image.

The Base blockchain is a public, immutable ledger. If you connect a wallet or transact using $COMMUNITY tokens, your public wallet address and the details of your on-chain transactions (amounts, timestamps, counterparties) are permanently visible to anyone, independent of this Privacy Policy. Community Platform does not control, and cannot delete or modify, data recorded on the blockchain. If you generate a self-custody wallet through our wallet generation tool, the private key and recovery phrase are created entirely in your browser and are never transmitted to or stored by Community Platform.

We share information with service providers who help us operate the Platform. They are:

Stripe: payment processing, identity verification, and payouts to experts and creators.

Supabase: our database, account authentication, and file storage (application data, uploaded images and documents, session messages, claims).

Vercel: website hosting and Web Analytics.

Sentry: error monitoring.

Anthropic: generating AI twin replies. Receives the text of AI twin conversations.

Voyage AI: search over a creator's AI twin material. Receives that material and the text of questions asked of the twin.

Cartesia: synthetic voice. Receives a creator's voice recording when they build a voice twin, and reply text to be spoken.

Simli: video avatars. Receives a creator's face photo when they build a video twin, and runs live avatar sessions.

Jitsi Meet: rooms for voice and video sessions.

Our email delivery provider: account, booking, and claim emails.

WalletConnect (Reown) and Coinbase Wallet: only if you choose to connect a wallet through them, to establish that connection.

We may also send operational alerts, which can include a claimant's name, email, and description of a claim, to an internal alerting destination we configure. These providers are permitted to use your information only as necessary to provide their services to us. We do not sell your personal information to third parties.

We retain account and application information for as long as your account is active or as needed to provide the Platform's services. Rejected applications and associated data are retained for record-keeping and to prevent duplicate submissions; they are not currently deleted on a fixed schedule, and you may ask us to delete them under Section 8. Files uploaded for a document review are deleted from storage after the claim window has closed and a further review period has passed. Blockchain data, once recorded, cannot be deleted by us or by you, as described in Section 5.

Depending on where you live, you have rights over your personal information. Under the EU/UK GDPR these include the rights to: access the data we hold about you; correct inaccurate data; erase your data ("right to be forgotten"); restrict or object to certain processing; data portability (receive your data in a portable format); and withdraw consent at any time. California residents (CCPA/CPRA) have comparable rights to know, delete, correct, and opt out of "sale" or "sharing". We do not sell your personal information.

To exercise any of these rights, contact us using the information in Section 13, or use the in-account data controls where available (export and account-deletion request). The in-account export currently includes your account profile, any expert or creator application, sessions you booked, memberships, personalized video requests, previous data-rights requests, and any waitlist signup. It does not yet include every record we hold, such as claims you filed, text-session messages, records from discontinued programs, and AI twin records; ask us and we will provide those. We verify the request comes from you, and we respond within 30 days (extendable where the law allows, with notice). Exercising your rights is free and will not result in discriminatory treatment.

Two limits apply to erasure: we cannot delete information already recorded on the public blockchain (Section 5), and we may be required to retain certain records to meet legal, tax, accounting, or anti-money-laundering obligations. Where that applies, we delete or anonymize the rest and retain only what the law requires.

Community Platform is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a user under 18, we will delete that information promptly. Parents or guardians who believe a minor has provided us with personal information should contact us using the information in Section 13 to request deletion.

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted data storage, access controls restricting who can view sensitive data, and secure processing of payment and identity information through Stripe rather than handling it ourselves. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Community Platform and its service providers may process and store information in countries other than your own. By using the Platform, you consent to the transfer of your information to these locations, which may have data protection laws that differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-Platform notification with reasonable advance notice. Continued use of the Platform after the effective date of an updated policy constitutes acceptance of the changes.

For questions about this Privacy Policy or to exercise your data rights, contact us at: support@joincommunityplatform.com.