Privacy Policy

1. About this policy

This Privacy Policy explains how the operator of Painted by Hannah Joy (referred to as we, us, or the Operator) collects, uses, shares, and protects your information when you use our website, membership, and community (the Platform). It also describes the choices and rights you have.

By using the Platform, you agree to the practices described here. If you have any questions, email us at help@hannahjoyy.com.

2. Information we collect

We collect the information needed to run your account and the Platform. This includes:

• Account and identity details handled by our authentication provider, such as your name, email address, and login credentials. Your password is managed by that provider, and we never see it.
• Profile details you choose to add, such as your display name, short bio, and interests.
• Membership and billing information. Payments are processed by Creem, our Merchant of Record. We do not receive or store your full card number. We do receive limited details such as your subscription status, plan, and billing events so we can grant or pause access.
• Content you create on the Platform, such as community messages and content requests.
• Usage and device information collected automatically, such as your IP address, browser and device type, pages viewed, and general activity, used for security and to keep the Platform working.
• Cookies and similar technologies used to keep you signed in and to remember your preferences.

3. How we use your information

We use your information to:

• Provide the Platform, create and manage your account, and give you access to the content and community.
• Process your membership through Creem and keep your access status current.
• Personalize your experience and remember your preferences.
• Communicate with you about your account, security, billing, and updates, and, if you opt in, occasional news.
• Keep the community safe by moderating content and preventing fraud and abuse.
• Meet our legal obligations and enforce our Terms.

4. How we share information

We do not sell your personal information. We share it only in these limited ways:

• With trusted service providers who process data on our behalf so the Platform can function. These include our authentication provider (Clerk), database and hosting (Supabase and Vercel), payments (Creem), media storage (Wasabi), email delivery (Resend), and realtime messaging (Ably). Each receives only what it needs for its role.
• When required by law, such as to comply with a legal request, or to protect the rights, safety, and property of our members, the public, or us.
• In connection with a business transfer, such as a merger or sale, in which case we will let you know.
• With your consent, or at your direction.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used so we can improve it. You can control cookies through your browser settings, though turning off some cookies may affect how the Platform works, including staying signed in.

6. Your email choices and how to unsubscribe

We send two kinds of email. The first is essential account email, such as billing confirmations, security notices, and important account updates. Because these are part of the service, they are sent while you have an account.

The second is optional email, such as occasional news about new content. You can opt out of optional email at any time in two ways: use the unsubscribe link at the bottom of any such message, or update your email preferences in your account settings. If you ever have trouble, email us at help@hannahjoyy.com and we will take care of it.

Separately, you can cancel your membership at any time from your account settings on the billing page, which stops future charges and renewals.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Platform. After you close your account, we delete or anonymize your personal information within a reasonable period, except where we need to keep certain records to meet legal, tax, accounting, security, or fraud-prevention obligations. For example, payment and billing records may be retained by us or by Creem as required by law.

8. How we protect your information

We take reasonable measures to protect your information, including access controls, encryption in transit, private media storage served only through permission-checked links, and limiting who can access data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any issue.

9. Your privacy rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or receive a copy of it, and the right to object to or limit certain uses. Residents of the European Economic Area and the United Kingdom have rights under the GDPR, and residents of California have rights under the CCPA and CPRA, including the right not to be discriminated against for exercising them.

You can update much of your information directly in your account settings. To make any other request, email us at help@hannahjoyy.com. We will respond as required by law, and we may need to verify your identity first.

10. Children's privacy

The Platform is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, you may use the Platform only with the consent and involvement of a parent or legal guardian, as described in our Terms. If you believe a child has given us personal information, email us at help@hannahjoyy.com and we will delete it.

11. International data transfers

We and our service providers may process and store your information in the United States and other countries where our providers operate. These countries may have different data protection laws than yours. Where required, we rely on appropriate safeguards for these transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, give notice through the Platform or by email. Your continued use of the Platform after the changes take effect means you accept the updated policy.

13. Contact us

If you have any questions or requests about your privacy, please email us at help@hannahjoyy.com and we will be glad to help.