Privacy Policy
This text has not been reviewed by an attorney and is not binding. Nothing in Golden Seat asks you to accept it yet. It is published so you can see what we intend; the version that takes effect will carry a date here.
Golden Seat collects only what it needs to run accounts, communities and seat sales. We do not sell personal information and we do not show advertising. This policy describes the product as built on the date of this version.
What we collect
| Information | Where it comes from | What we use it for |
|---|---|---|
| Email address, username, display name | You, at sign-up | Your account, sign-in, notifications |
| Password | You, at sign-up | Sign-in. Stored in hashed form by our authentication provider; we cannot read it |
| Profile photo and bio | You, optionally | Your public profile |
| Chat messages, likes, announcements, attached images | You | Showing them to the community's creator and seat holders |
| Community name, description and image | The creator | The community and its public preview page |
| Seats held, listings, offers | Your activity | Running seats, resale and offers |
| Purchases and sales: price, date, buyer, seller, fees, Stripe payment reference | Your transactions | Transferring seats, paying sellers, records, disputes |
| Payout records: amounts, due dates, status | Sales of your seats | Releasing creator and seller payouts |
| Stripe account ID and whether Stripe has enabled charges and payouts | Stripe, after you onboard | Knowing whether you can sell |
| Notifications and whether they were read or emailed | Generated by activity | Your notification inbox and emails |
| Online status | Your open browser session | Showing who is online in a community. Not stored |
| Sign-in cookies | Your browser | Keeping you signed in |
| Server logs such as IP address and browser type | Our hosting provider | Security and troubleshooting |
We do not collect or store card numbers, bank details or identity documents. Stripe collects those directly.
We do not use analytics or advertising trackers. [Operator to confirm before publishing, and to update this policy if any are added.]
What is public
Your username, display name, profile photo and bio appear on your public profile page and next to what you post. A community's name, image, description, seat count, prices and recent sale figures appear on its public preview page. Chat messages and announcements are visible only to that community's creator and seat holders.
Who we share it with
We share information only with the providers that run the platform for us, and only what each needs.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database, sign-in, file storage, live chat | Everything stored on the platform |
| Stripe | Payments, seller identity checks, payouts | Transaction details; what sellers give Stripe directly |
| Vercel | Website hosting | Requests to the site, including IP address |
| Resend | Notification email | Your email address and the notification text |
We may also disclose information when the law requires it, to enforce our terms, or as part of a sale or merger of the business. [Counsel to review.]
Your choices
- You can edit your username, display name, photo and bio on your profile page.
- You can turn off notification emails in your settings. In-app notifications remain.
- You can delete your account from your profile page. Section 8 of the terms limits when a creator, or anyone with unreleased payouts, can do so.
- Depending on where you live, you may have rights to access, correct or delete your information. Contact us at [support email]. [Counsel to add state-specific rights language, including California.]
How long we keep it
We keep account information while your account is open. When an account is deleted, its profile is removed. Records of purchases, sales and payouts are kept for [period] for accounting, tax and dispute purposes. [Operator to decide what happens to a deleted user's chat messages; today they are not automatically removed.]
Security
Access to data is restricted in the database itself, so each user can read only what they are entitled to. Connections are encrypted. No system is perfectly secure, and we will notify you of a breach where the law requires.
Children
Golden Seat is not for anyone under 18, and we do not knowingly collect information from children.
Changes and contact
We will post changes to this policy with a new date and notify you of material changes. Questions go to [support email].