Privacy Policy

This Privacy Policy applies to Media Companies (“MCs”), Rights Holders (“RHs”), website visitors, account holders, and any other individuals who interact with the Platform. It describes how we handle personal information we collect directly from Users, automatically when you use the Platform, and from third parties in connection with your use of the Platform.

We collect the following categories of personal information:

• Identifiers: Name, email address, phone number, username, account ID, and IP address.
• Account information: Credentials and authentication data used to create and maintain your account.
• Business and contact information: Company name, role, billing contact, mailing address, and domain information (for MCs).
• Transaction information: Inquiries submitted, offers made, accepted or rejected terms, signed licenses, payment and payout information, and deal history.
• Content information: Content URLs, titles, descriptions, captions, metadata, ownership claims, and verification materials submitted through the Platform or UGC Radar.
• Communications: Messages exchanged between Users through the Platform, support communications, and email interactions with Chauncy.
• Device and usage information: Browser type, device type, operating system, log data, pages and features accessed, actions taken, and session data.
• Payment and payout information: Payment transactions are processed through third-party processors (such as Stripe, Inc.). We do not store full payment card numbers or bank account details on our systems. We receive transaction metadata, payout status, and compliance information from our processors.
• Compliance and fraud information: Identity verification materials, sanctions and fraud screening signals, and audit logs.
• Social profile and verification information: Social media handles, profile URLs, proof-of-control challenge codes, and publicly available profile data used to verify RH control over social media accounts.
• Legal acceptance records: Records of your acceptance of Terms of Use, Privacy Policy, and other legal acknowledgments, including timestamps, version numbers, IP addresses, and user agent data.

• Directly from you when you create an account, submit inquiries, negotiate deals, sign licenses, submit content, or contact us.
• Automatically through your use of the Platform, including through cookies, server logs, and similar technologies.
• From counterparties in transactions, such as information included in offers or messages.
• From third-party service providers, including Stripe for payment processing, Resend for email delivery, and cloud hosting and analytics providers.
• From public social media profiles when you submit a social profile claim for verification.

• Provide, operate, maintain, and improve the Platform;
• Create and manage User accounts;
• Facilitate inquiries, negotiations, license execution, signatures, payments, and payouts;
• Verify identity, social media profile control, and content ownership claims;
• Operate UGC Radar and related discovery features;
• Send transactional, administrative, and support communications;
• Send product or service updates where you have not opted out and as permitted by applicable law;
• Improve and debug the Platform and analyze usage patterns;
• Enforce the Terms of Use and other Platform policies;
• Prevent fraud, abuse, and unauthorized access;
• Comply with applicable legal obligations; and
• Maintain audit records and compliance documentation.

Where the GDPR applies, we rely on the following legal bases:

• Contractual necessity: Processing necessary to perform our contract with you, including operating the Platform and facilitating transactions.
• Legitimate interests: Processing necessary for our legitimate interests — fraud prevention, platform security, service improvement, and compliance records — where those interests are not overridden by your rights.
• Legal obligations: Processing necessary to comply with applicable laws including tax, anti-money laundering, and regulatory obligations.
• Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

• To other Users as necessary for transactions and Platform communications. Note: MC identity is kept confidential from RHs until both parties sign a license; RH identity may be disclosed to MCs at the signing stage.
• To service providers that provide cloud hosting, database management, email delivery, payment processing, analytics, and security services. These providers are contractually required to use personal information only as necessary to provide services to us.
• To Stripe for payment processing, fraud detection, KYC, and tax compliance, subject to Stripe’s privacy policy.
• To legal and regulatory authorities as required by applicable law, court order, or government request.
• In business transfers such as mergers, acquisitions, or asset sales, subject to applicable confidentiality obligations.
• With your consent or at your direction.
• Public display: Content submitted to UGC Radar may be displayed on the Platform and used in promotion as described in the Terms of Use.

We use cookies, session storage, and similar technologies to operate the Platform, maintain authentication sessions, understand usage patterns, and for security purposes. We do not currently use third-party advertising cookies or engage in cross-context behavioral advertising.

You can control cookies through your browser settings. Disabling certain cookies may impair your ability to use the Platform, including authentication. For more information, contact us at support@chauncy.io.

We retain personal information for as long as your account is active and as necessary to provide the Platform and fulfill the purposes described in this Privacy Policy. We also retain information as required or permitted by law, including:

• Transaction, license, and payment records for applicable financial and tax retention periods;
• Audit logs and compliance documentation for applicable regulatory periods;
• Fraud and security records to protect against abuse;
• Dispute records during and after resolution; and
• Legal acceptance records for enforceability purposes.

When retention is no longer required, we delete or anonymize personal information. Account deletion does not guarantee deletion of all legally retained records.

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No information system is completely secure. If you believe your account has been compromised, contact us immediately at support@chauncy.io.

Chauncy is based in the United States. Personal information may be transferred to, stored in, and processed in the U.S. and other jurisdictions where our service providers operate. Where required by applicable law, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.

Subject to applicable law, you may have the right to:

• Access / Know what personal information we hold about you;
• Export / Portability — receive a portable copy of certain personal information;
• Correction of inaccurate personal information;
• Deletion of your personal information, subject to applicable legal retention obligations;
• Restriction or objection to certain processing where applicable law permits;
• Withdrawal of consent where processing is based on consent; and
• Opt-out of sale / sharing — Chauncy does not sell personal information.

Exercise your rights through:

• Your Account Settings › Privacy & Data page; or
• Email: support@chauncy.io

We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law (generally 45 days for U.S. state privacy laws; 30 days under GDPR, with extensions where permitted). California residents using an authorized agent must provide the agent with written permission and be prepared to verify their identity directly with us.

You may request a portable copy of your personal information through Account Settings. We will endeavor to include:

• Your account profile and role information;
• Transaction history involving your account;
• Inquiries and offers you have submitted or received;
• Messages you have sent through the Platform;
• Content submissions and UGC Radar submission metadata; and
• Legal acceptance and data rights request history.

Exports may exclude information affecting other Users’ rights or privacy, trade secrets, privileged materials, fraud or security-sensitive data, and information held by third-party processors.

You may request deletion through Account Settings. Please understand:

• Account access will be removed;
• Profile and contact information will be deleted or anonymized where legally permissible;
• Completed transaction records, license records, payment and tax records, audit logs, dispute records, fraud records, legal acceptance records, and other records required or permitted by applicable law may be retained;
• Active transactions or disputes may delay processing until resolved;
• Chauncy cannot delete personal information held by counterparties to your transactions or by third-party processors such as Stripe; and
• Deletion does not affect the enforceability of license agreements or payment obligations you entered into through the Platform.

This section supplements our Privacy Policy for California residents under the CCPA/CPRA.

Categories of personal information collected and disclosed for business purposes: Identifiers; customer records; commercial information (transaction history, offers, licenses); internet/network activity (device data, usage logs); professional/employment-related information (company, role). We do not intentionally create consumer profiles for targeted advertising. Payment card data is processed by Stripe and not stored by Chauncy.

Sale and sharing: Chauncy does not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of Users under 16.

Non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise your rights, see Section 12. California residents may also use an authorized agent with proper written authorization.

If you are located in the EEA, United Kingdom, or Switzerland, in addition to the rights in Section 11, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

For information about the legal basis for a specific processing activity or to exercise GDPR rights, contact us at legal@chauncy.io.

The Platform is not directed to persons under 18. We do not knowingly collect personal information from children under 18. If you believe a child under 18 has provided information to us, contact support@chauncy.io and we will take steps to delete such information.

The Platform may contain links to third-party websites or services. Chauncy is not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access in connection with the Platform.

We may update this Privacy Policy from time to time. When we do, we will update the “Effective Date.” For material changes, we will provide notice through the Platform or by email as required by applicable law. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy where permitted by law.

Questions or requests regarding this Privacy Policy:

Chauncy LLC — Attn: Privacy
30 N Gould St., Ste N, Sheridan, WY 82801
legal@chauncy.io