Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Social Commerce Ltd, a private limited company registered in England and Wales, Company Number 15286207, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ ("Receipt", "we", "us", "our"). Social Commerce Ltd also operates other products, including Folo and Fanogram, on the same account, data and payment systems; see Section 8 (Sharing across Folo, Fanogram and Receipt).

Receipt is operated by Social Commerce Ltd (registered in England and Wales, above) and Social Commerce EU Ltd (registered in Cyprus, 4th Floor, Agios Nikolaos, Kamares, 6037 Larnaca, Cyprus).

Social Commerce Ltd is registered with the UK Information Commissioner's Office under registration reference ZB755605. This Privacy Policy applies to Receipt; the group's ICO registration and data-protection contact point are shared across its products. For data-protection queries, contact dataprotection@knky.co or call 0191 6941006.

2. Three kinds of people, three roles

• Creators with a Receipt account: we are the controller of your account data.
• Visitors to a creator's page: we log clicks and page views so the creator can see which links earn money. We decide what is recorded and how long it is kept, so we are the controller of those records.
• Buyers and email subscribers: sale data comes from the creator's own channels, and sign-ups are collected for the creator. The creator is the controller of that data, and we act as the creator's processor, handling it only to provide Receipt to them.

If you are a visitor, buyer or subscriber, you can contact us or the creator directly to use your rights. We will help either way.

3. Information we collect

From creators: your email address and sign-in, handle and profile; your page (links, blocks, design, images, videos, and any custom CSS); the connections you choose to make; billing details held by Stripe (we keep a Stripe customer id, your plan, and a record of each billing receipt we email you, including whether it was opened or a link in it was clicked); and messages you send us.

From visitors, each time a tracked link is tapped or a creator's page is viewed: which link or page, the time, the website that sent you (from your browser's referrer), your IP address, your browser's user-agent string, and your country (supplied by our hosting provider).

• A click id carried in the link, not stored on your device. When you tap a tracked link we add a unique click id to the address of the page it sends you to, so that if you buy there the sale can be matched to that click. The id identifies that one click, not you, and a new one is made for every tap. We set no visitor or attribution cookie.
• A daily visitor code. A one-way code computed on our server from your IP address, your browser and the date. It changes every day, cannot be turned back into your IP address, and is never stored on your device. We store it with each click, page view and quiz answer, and use it to ignore repeat taps within 30 seconds, to slow abusive traffic (we stop logging, we never block the link), to limit how often the same visitor can submit a creator's quiz, and to attach an email address to a quiz answer the same visitor has just given. It is never used for attribution, it is never shown or exported to creators, and it cannot link your visits on different days.
• An 18+ confirmation, if you confirm one, is remembered in your browser for that session only, not on our servers.

From visitors who answer a creator's quiz: your answers, the result you were shown, the daily visitor code, the click id you arrived on (if any), and, only if you choose to give it and tick the consent box, your email address with the consent wording and time.

About buyers, from the creator's sales channels: the amount, currency, time and channel of a sale, the buyer's email address where the channel provides it, and the click id if the checkout carries it back. These come from Stripe and Shopify notifications, from affiliate reports a creator uploads, and from Fanogram and Folo.

• The notifications themselves. A Stripe or Shopify notification can carry more about the buyer than we use, such as their name, phone number and postal address. We keep the whole notification only until we have processed it (or, for a refund that arrives before its sale, until that refund is matched to its sale; and, if processing fails, until our staff retry it or it reaches the 24-month limit in section 10). After that we replace it with a short summary that holds no name, email, phone number or address: the ids, type, amount, currency and time of the payment, and the click id if there was one.

From email subscribers: the email address you enter on a creator's sign-up form, the consent wording you ticked and its language, and when you signed up or unsubscribed.

4. How we use your information

• To run Receipt for the creator who signed up, and show them their links, clicks, sales and receipts.
• To match a sale to the click that opened the checkout, using a fixed rule a creator can check by hand. We do not use AI to decide attribution.
• To send sign-in codes, billing receipts and, where we send one, a weekly summary email.
• To take payment for Receipt plans.
• To keep the service secure, limit abuse and fix errors.
• To meet legal, tax and accounting obligations.

We do not use your data for advertising and we do not sell it.

5. Lawful bases

We rely on these lawful bases:

• Creator accounts and billing: our contract with you.
• Visitor clicks and page views: our legitimate interest in showing creators which of their links earn sales, and in running and protecting the service. We keep these records limited so that they do not override your interests: no cookie or other identifier stored on your device, a visitor code that changes every day, and IP addresses deleted after 24 months with the rest of the record.
• Quiz answers: our legitimate interest in limiting repeat submissions, and the creator's in seeing how visitors answer. An email address given with a quiz answer relies on the consent you give the creator.
• Buyer sales and email sign-ups: we process these for the creator, who as controller decides the lawful basis. Email sign-ups rely on the consent you give the creator.
• Security and abuse prevention: our legitimate interests.
• Tax and legal requests: legal obligation.
• Analytics cookies: your consent.

6. Sharing and disclosure

We share only what is needed, with providers bound by data-processing terms:

• Clerk: sign-in, shared across Folo, Fanogram and Receipt.
• Neon: database hosting.
• Vercel: web hosting; also supplies a visitor's country.
• Stripe: billing for Receipt plans, and the Stripe connection a creator chooses to make.
• Shopify: order notifications from a creator's shop, when the creator connects it.
• Resend: sending emails (sign-in codes, billing receipts).
• Google: Google Analytics, only if you accept analytics cookies.
• Sentry: error monitoring, where we switch it on, configured so request bodies and cookies are never sent to it.

We may disclose information where the law requires it, or to protect the rights, safety and security of our users and the service.

7. Within our corporate group

We may share your personal data with other companies in our corporate group, meaning platforms and services operated by Social Commerce Ltd (including Folo and Fanogram, and any successor platform to which the Receipt service, or part of it, is migrated), where necessary for: providing and improving our services; account and service continuity, including migration of your account, content, transaction history and verification status to a successor or affiliated platform; security, fraud prevention and compliance; customer support; and internal administration and analytics.

Group companies which process your personal data do so under the same standards of protection described in this Privacy Policy and under intra-group data-protection arrangements. Where a migration of your account to an affiliated platform materially changes who controls your personal data or how it is used, we will inform you in advance and, where required by law, seek your consent.

For Receipt specifically: the shared sign-in; Fanogram's identity and verification records, which Receipt reads to know whether a creator also has a Fanogram creator account and whether it is verified; media a creator chooses to place on their page from their Fanogram vault, and files a creator uploads in Receipt, which are stored in their Fanogram vault (Receipt keeps only a reference to each file); messages a creator sends to Fenn, the assistant shared by Folo, Fanogram and Receipt, which are sent to and answered by Fanogram's Fenn service and kept in the creator's shared Fenn conversation history; and, for Fanogram growth campaigns, a record that a sale was attributed to a link (link id, amount, currency and times only, no buyer details).

8. Sharing across Folo, Fanogram and Receipt (single sign-on)

Folo, Fanogram and Receipt share the same account, identity, chat, vault and payment systems. Where you use the same credentials across more than one of these products, the account-level data needed to recognise you as the same person and to keep your choices consistent, such as your sign-in identity and your cookie/privacy consent, is held once and read by whichever of the three products you are using, rather than being collected separately by each.

Product-specific data, such as the content you post or buy on one product, is not automatically shown on another product unless that specific feature says so (for example, a creator's Folo profile may be mirrored into Fanogram as a mini-profile; our Terms of Service describe which features cross over). A request to delete your shared account, or to exercise a right in Section 11, applies to this shared data; where a product additionally holds data that is not part of the shared systems, we will tell you if that data needs a separate request.

Receipt's clicks, page views, sales, quiz answers and subscriber lists are Receipt-specific data. Deleting your Receipt account from Settings deletes them straight away. It does not delete the shared sign-in, because Folo and Fanogram use it too; to delete the shared account itself, contact dataprotection@knky.co. When you are signed in, your cookie choice is read from and saved to your account, as on Folo.

9. Cookies and similar technologies

See our Cookie Policy. Receipt sets no visitor or attribution cookie.

10. Data retention

• Clicks and page views, including the IP address and user-agent stored with them, are kept for no longer than 24 months. Records older than that are removed by a scheduled deletion job.
• Quiz answers without an email address follow the same 24-month limit. A quiz answer with an email address is kept like a sign-up, until the creator deletes their account, unless you ask us to delete it sooner. When a click is removed, the click id stored with a quiz answer is removed with it.
• Creator account data is kept while your account is open. When you delete your Receipt account we delete your profile, page, links, clicks, page views, sales, quiz answers, connections and subscriber list straight away.
• Sales notifications from Stripe, Shopify, Fanogram and Folo are reduced to a summary with no buyer name, email, phone number or address once processed (see section 3), and deleted 24 months after we receive them, on the same monthly schedule as clicks.
• What survives a deletion, and why: our staff audit log (including a record of the deletion itself); support messages, unlinked from the account; and, for 30 days, a bare record of which Stripe, Shopify, Fanogram or Folo notifications we have already processed for the account (the notification's own id and nothing else), so a retry cannot re-import a deleted sale. Older notification records for the account are deleted with it.
• Billing records: for as long as tax and accounting law requires us to keep them, then deleted.

11. Your choices and rights

Depending on where you live, you may also have rights to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. Where we rely on your consent, you can withdraw it at any time, for example by changing your cookie choice or unsubscribing. Creators can export their sales and subscriber lists from the dashboard.

To use a right, contact dataprotection@knky.co or use our contact form. We will reply within the time the law requires. You can also complain to a data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk), and in the EU your local supervisory authority.

12. International transfers

Some of our providers process data outside the UK and EEA, for example in the United States. Where they do, we rely on the safeguards the law provides, such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, or a decision that the destination country protects personal data adequately. You can ask us for details of the safeguard that applies.

13. Age

Creator accounts are for people aged 18 or over. A creator can mark a link as 18+, and visitors then confirm they are 18 or over before it opens. That is a self-declaration, not age verification. We do not knowingly collect data from children. Our Acceptable Use Policy sets the rules for links to adult content.

14. Changes to this policy

We will update this policy when our practices change, and tell creators in the dashboard or by email before a significant change takes effect.

15. Contact

Data-protection queries: dataprotection@knky.co or 0191 6941006. Anything else: our contact form, or write to Social Commerce Ltd, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.