Privacy Policy

This Privacy Policy explains how May Secrets collects, uses, shares, and protects your personal data when you use our Platform and Services. We are committed to safeguarding your privacy and complying with applicable data protection laws.

May Secrets is the data controller of your personal data for the purposes of the Platform.May Secrets is operated by Ismael Gómez, sole trader registered in Italy, with registered address at Salita Foti 5, 98060 Basicò (ME), Italy. For any data protection inquiries, contact us at support@maysecret.com.

1. What Data We Collect

We collect and process the following categories of personal data depending on how you use the Platform:

Data you provide directly

• Identity data (e.g. name, username, date of birth)
• Contact data (e.g. email address)
• Payment data (e.g. card or billing details, processed by our Payment Processor, CCBill)
• Creator verification documents (e.g. ID, for creator onboarding)
• Communications (e.g. support messages, contact form submissions)

Data we collect automatically

• Usage data (e.g. login times, pages viewed, interactions)
• Technical data (e.g. IP address, browser type, device model)
• Location data (based on IP address)
• Session activity (e.g. navigation patterns)

Data from third parties

• Identity verification services
• Fraud prevention services

2. How We Use Your Data

3. Cookies

We use essential cookies to operate the Platform. These include authentication session cookies managed by Supabase, locale preference cookies, and theme settings. These cookies are strictly necessary for the Platform to function and cannot be disabled.

Our Payment Processor (CCBill) may set additional cookies during the payment process. These cookies are governed by CCBill's own privacy policy.

We do not currently use third-party tracking or advertising cookies. If this changes in the future, we will update this policy and provide you with appropriate consent controls.

4. Who We Share Your Data With

We only share your personal data where necessary and for legitimate purposes:

• CCBill — Our authorized payment processor (PCI DSS compliant). CCBill is an independent data controller for payment data it processes. See their privacy policy at https://support.ccbill.com
• Supabase — Database hosting, authentication, and file storage
• Vercel — Application hosting and content delivery
• Resend — Email delivery service for notifications
• Legal authorities — Where required by law or court order

We do not sell your personal data to third parties. Wherever possible, we enter into data processing agreements with our service providers to ensure your data is handled securely.

Some of our service providers are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Data Retention

We retain your personal data only for as long as necessary:

• While you maintain an active Account on the Platform;
• For legal, regulatory, tax, or audit purposes after account closure;
• Payment records are retained as required by applicable tax and financial regulations.

After the applicable retention period, your data is securely deleted or anonymized.

6. Your Rights (Including GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) and UK GDPR. Regardless of your location, we extend the following rights to all Users:

• Right to access — Request a copy of your personal data
• Right to rectification — Correct inaccurate or incomplete data
• Right to erasure — Ask us to delete your data under certain conditions
• Right to restrict processing — Limit how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Stop certain types of processing, including processing based on legitimate interest
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@maysecret.com. We will respond within 30 days (or within the timeframe required by applicable law).

If you are in the EEA or UK and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority (data protection authority).

7. Your Rights (California — CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — Request the categories and specific pieces of personal information we have collected about you
• Right to delete — Request deletion of your personal information
• Right to opt-out of sale — We do not sell your personal information
• Right to non-discrimination — We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@maysecret.com. We will verify your identity before processing your request and respond within 45 days.

8. Children

The Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you become aware of someone under 18 using May Secrets, please notify us immediately at support@maysecret.com.

9. Security

We take the protection of your personal data seriously. We implement appropriate technical and organizational measures to prevent accidental loss, unauthorized access, or misuse of personal data. These include:

• Encryption of data in transit and at rest;
• Secure authentication via Supabase with row-level security policies;
• Access restrictions and confidentiality agreements;
• Regular security reviews.

You are responsible for keeping your Account credentials confidential and must not share them with others.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be accessible on this page, and significant changes will be communicated where required. The date at the top of this document indicates when it was last updated.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data:

Visit our Contact page or contact CCBill for billing inquiries at https://support.ccbill.com.