Privacy Policy

• What we collect: account details (name, email, sign-in provider), payment confirmations from our processors, and usage data about how you use the Services.
• Why: to run your membership — deliver content, community and events, process billing, prevent fraud, and comply with the law.
• We do not sell your personal information. We share it only with the service providers that run the platform, with the Creator you subscribe to (limited to what is needed to deliver your membership), and where the law requires it.
• We never see your full card number. Card and wallet payments are handled by MercadoPago, Stripe and supported crypto networks; we receive confirmations, not credentials.
• Your rights: access, correction, deletion, portability and objection — see Sections 9–11. Requests: privacy@chancemarket.io.
• 18+: the Services are strictly for adults.

Information you provide. When you create an account we collect your name, email address and, where you use a third-party sign-on (such as Google), the identifier and email that provider shares with us. If you subscribe to a Creator or make a purchase, we collect the information needed to record and fulfill that purchase: the plan you chose, the amount, the currency, and the payment method type. If you contact support, we keep the content of that correspondence.

Information collected automatically. We collect usage data when you use the Services: pages viewed, features used, the Creator pages you visit, language preference, IP address, browser and device type, and approximate (country-level) location derived from your IP address. We use country-level location to comply with laws that restrict where certain offerings may be made available; we do not collect precise GPS location.

Information from Creators and partners. If a Creator or partner invites you to the platform, we may receive your email address from them to deliver that invitation. Any such information is treated in accordance with this Policy.

We use personal information on the following legal bases and for the following purposes:

• To perform our contract with you: operating your account, delivering Membership Access (content, community, messaging and events), processing subscriptions and renewals, notifying you about the memberships you have purchased, and providing customer support.
• Legitimate interests: understanding how the Services are used so we can improve them; securing the platform; preventing fraud, abuse and multiple-account schemes; enforcing our Terms; and sending service updates about features relevant to your membership (you can opt out of non-essential messages at any time).
• Consent: marketing communications, and any optional feature that expressly asks for permission. You can withdraw consent at any time without affecting your membership.
• Legal obligations: tax and accounting record-keeping, responding to lawful requests from authorities, and compliance with sanctions, anti-fraud and anti-money-laundering obligations.

We may use aggregated or anonymized data — which cannot identify you — for analytics, research and reporting without restriction.

We do not sell your personal information. We share it only as follows:

• Service providers. Companies that run the platform on our behalf under contractual confidentiality: Google Cloud / Firebase (hosting, authentication and database), MercadoPago and Stripe (payment processing), our email delivery provider (transactional and membership emails), and analytics providers. Each may access only what it needs to perform its service.
• The Creator you subscribe to. So your membership can actually be delivered, the Creator (or a third party running an event or benefit on their behalf) may receive your name, email address or account identifier — limited to what is needed to provision your access, as described in the Terms.
• Legal and safety. Where we reasonably believe disclosure is necessary to comply with a law, regulation, legal process or governmental request; to enforce our Terms; or to protect the rights, property or safety of Chancemarket, our users or the public.
• Business transfers. If Chancemarket or Twimbox LLC is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction; this Policy will continue to apply to it.

Payments are processed by third parties: MercadoPago, Stripe (cards) and supported cryptocurrency networks. Your card number, banking credentials, wallet private keys and similar payment credentials go directly to the processor — Chancemarket never receives or stores them. The processor shares with us only confirmation-level data: that a payment succeeded or failed, the amount, currency, and a payment reference we use to activate your membership. Where you pay with cryptocurrency, the transaction is recorded on a public blockchain that we do not control; on-chain data is public by design.

Each processor handles your data under its own privacy policy: we encourage you to review the policies of MercadoPago and Stripe if you use those methods.

We use a small set of cookies and similar browser storage:

• Strictly necessary: keeping you signed in and securing your session. The Services do not work without these.
• Preferences: remembering choices such as your language.
• Analytics: understanding aggregate usage so we can improve the Services.

You can control cookies through your browser settings; blocking strictly necessary cookies will prevent you from signing in. Like most sites, we do not currently respond to “Do Not Track” browser signals, as no industry standard for interpreting them exists.

We keep personal information only as long as needed for the purposes above. Our general schedule:

• Account information: for as long as your account is active. If you delete your account (or ask us to), we delete or anonymize your personal information from active systems within 30 days, except where retention is legally required.
• Transaction records: up to 7 years, to comply with tax and accounting obligations.
• Support communications: up to 2 years, to resolve ongoing issues and maintain continuity.
• Usage data: up to 18 months in identifiable form; longer only in aggregate.
• Backups: deleted data may persist in encrypted backups for up to 6 months before being purged; backups are not used to restore deleted accounts.
• Legal hold: where a dispute, investigation or legal obligation requires it, we may suspend deletion of the relevant records until the matter is resolved.

We implement technical and organizational measures appropriate to the risk: encryption in transit (TLS) for all traffic, encryption at rest for stored data, access controls that limit personal-data access to personnel who need it, and monitoring for unauthorized access. Payment credentials are held by our payment processors, not by us.

No method of transmission or storage is completely secure; we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access — receive a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted, in certain circumstances.
• Restriction — limit how we process your data while a dispute about it is resolved.
• Portability — receive the data you provided in a structured, machine-readable format.
• Objection — object at any time to processing for direct marketing, and in certain other situations to processing based on legitimate interests.
• No automated decisions — not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.

To exercise any of these rights, email privacy@chancemarket.io. We respond within the timeframes required by law. You also have the right to lodge a complaint with your local supervisory authority.

In the preceding 12 months we have collected these categories of personal information as defined by the California Consumer Privacy Act: identifiers (name, email, IP address, account identifiers), commercial information (purchases and subscriptions), and internet activity (interactions with the Services). We collect them from you directly and from your use of the Services, for the purposes described in Section 3, and disclose them for business purposes only to the categories of recipients in Section 4.

We do not sell or share your personal information as those terms are defined by the CCPA, and we have no actual knowledge of selling or sharing personal information of anyone under 16. California residents have the right to know, access, correct and delete their personal information, and the right not to be discriminated against for exercising those rights. Submit requests to privacy@chancemarket.io; we will verify your identity before responding and answer within 45 days (extendable to 90 with notice).

If you are in Argentina, your personal data is protected by Law No. 25,326 on Personal Data Protection. You have the right to access your personal data free of charge at intervals of no less than six months (unless a legitimate interest justifies more frequent access), and to request its rectification, updating or deletion. Requests can be sent to privacy@chancemarket.io.

The Agencia de Acceso a la Información Pública (AAIP), in its capacity as supervisory authority of Law No. 25,326, is responsible for handling complaints and claims regarding non-compliance with personal data protection rules.

We operate globally, and your personal information may be transferred to and stored in countries other than your own — including the United States, where our infrastructure providers operate. Data protection laws in those countries may differ from those of your home country. Where we transfer data from the EEA, the UK or other jurisdictions with transfer restrictions, we rely on safeguards such as adequacy decisions or standard contractual clauses approved by the relevant authorities, so that your data receives a similar degree of protection wherever it is processed.

The Services are strictly for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has provided us personal information, contact us at privacy@chancemarket.io.

Creator pages may link to sites and services that Chancemarket does not control — a Creator's social profiles, an event platform, or a partner's store. Information you provide to those third parties is governed by their privacy policies, not this one. We are not responsible for the privacy or security practices of third-party sites, and a link does not imply our endorsement.

We may update this Policy from time to time, in which case we will update the “Last updated” date above. For material changes we will use reasonable efforts to notify you — by email, by a notice within the platform, or both — before the changes take effect. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

For privacy questions or to exercise any right described here, contact privacy@chancemarket.io. For general legal questions, contact legal@chancemarket.io.