Privacy Policy — TavernPost

1. Introduction

TavernPost LLC ("TavernPost," "we," "us," or "our") operates the TavernPost platform at tavernpost.org. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform. By using TavernPost, you consent to the practices described in this policy.

2. Information We Collect

Information You Provide Directly

When you create an account, set up a profile, or use our services, you may provide:

Account information: email address, username, password
Profile information: display name, bio, avatar, banner image, social links
Content: listings, portfolio pieces, comments, reviews, feedback submissions
Transaction information: purchase history, commission details
Communications: messages sent through the commission system, support requests

Information Collected Automatically

When you visit TavernPost, we automatically collect certain information:

Usage data via Vercel Analytics: page views, navigation patterns, and general usage metrics. Vercel Analytics does not use cookies and does not fingerprint individual users.
Performance data via Vercel Speed Insights: page load times and performance metrics to help us improve the platform experience.
Device information: browser type, operating system, and screen resolution (aggregated, not individually tracked).

Information from Third Parties

If you sign in using a third-party OAuth provider (such as Google or Discord), we receive your name, email address, and profile image from that provider. We do not receive or store your password from any OAuth provider.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the TavernPost platform
Process transactions and send transactional notifications (purchase confirmations, commission updates, etc.)
Display your public profile and content to other users
Enforce our Terms of Service and moderate content
Respond to support requests and communicate with you about your account
Analyze platform usage to improve features and performance
Detect and prevent fraud, abuse, and security incidents

We do not send marketing emails. All emails from TavernPost are transactional — related to your account activity, purchases, commissions, or platform updates.

4. How We Share Your Information

We do not sell your personal information. We share information only with the following service providers, and only as necessary to operate the platform:

Stripe: Payment processing. Stripe receives your payment information directly — TavernPost does not store credit card numbers or bank account details.
Supabase: Database hosting, authentication, and file storage. Your account data and uploaded content are stored on Supabase infrastructure.
Resend: Email delivery. Your email address is shared with Resend to deliver transactional emails.
Vercel: Hosting and analytics. Vercel hosts the TavernPost application and provides aggregated analytics data.
Legal requirements: We may disclose your information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Storage and Security

Your data is stored on servers located in the United States, operated by our infrastructure providers (Supabase and Vercel). We use industry-standard security measures to protect your information, including encryption in transit (TLS), encryption at rest, and Row Level Security policies on our database to ensure users can only access their own data.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active and as needed to provide you with our services. If you delete your account, we will remove your personal information from our systems within 30 days, except where retention is required by law.

Financial transaction records are retained for 7 years to comply with tax and accounting regulations. These records include purchase amounts, dates, and payout information, but not payment card details (which are held by Stripe).

7. Your Rights

You have the following rights regarding your personal information:

Access: You can request a copy of the personal information we hold about you.
Correction: You can update or correct your personal information through your account settings, or by contacting us.
Deletion: You can request deletion of your account and personal information.
Portability: You can request your data in a portable format.
Objection: You can object to our processing of your personal information in certain circumstances.

To exercise any of these rights, contact support@tavernpost.org. We will respond to your request within 30 days.

8. Children's Privacy

TavernPost requires users to be at least 13 years of age to create an account. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact support@tavernpost.org.

9. Cookies

TavernPost uses only essential cookies required for the platform to function, such as authentication session cookies. We do not use advertising cookies, tracking cookies, or third-party marketing cookies.

Vercel Analytics, which we use for aggregated usage metrics, does not use cookies and does not fingerprint individual users. It collects only anonymous, aggregated data.

10. Third-Party Links

TavernPost may contain links to third-party websites, including creator social media profiles and external resources. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a notice on the platform. Your continued use of TavernPost after changes take effect constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Contact support@tavernpost.org.