PRIVACY POLICY
1. What we collect
Account data — name, email, role, password (hashed), optional phone and 2FA secret. Professional data — license state, number and expiry for verified pros. Content — posts, stories, photos, videos, reviews, messages. Transactions — order, appointment and payout records (Stripe handles card details; we receive only tokens and status). Shipping — buyer addresses collected at checkout and seller ship-from addresses for label printing. Usage — device, IP (used for sign-in protection) and pages viewed.
2. How we use it
To run the platform (feeds, bookings, orders, live streams, votes), to send reminders and notifications you've opted into, to prevent fraud and abuse, to verify licenses, to pay sellers through Stripe Connect, and to improve the product. We do not sell your personal data.
3. Who sees what
Your display name, posts, stories, portfolio, reviews and booking page are public. Private messages are visible only to participants. Shipping addresses are shared only with the seller of the item you bought. License numbers are never shown publicly — only a "Verified" badge.
4. Service providers
Stripe (payments & payouts), LiveKit (live video), EasyPost/Shippo (shipping labels), Twilio (SMS), Resend (email), Anthropic Claude via Emergent (AI Beard Coach) and cloud object storage for media. Each processes data only to provide its service to us.
4a. SMS / text messaging
If you opt in to text messages, we use your mobile number only to send the appointment, order and account messages you consented to. Mobile phone numbers and SMS opt-in consent are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. Your number is shared only with Twilio, our messaging provider, to deliver those messages. You can opt out at any time by replying STOP or unchecking SMS in Account → Reminders.
5. Retention
Stories expire after 24 hours (highlights persist until you remove them). Live replays remain until the host deletes them. Transaction records are kept 7 years for tax and compliance. You can delete posts, stories, portfolio items and messages yourself; contact us to delete your whole account.
6. Your choices
Turn email/SMS reminders off in Account → Reminders. Enable 2FA in Account → Security. Request a copy of your data or deletion at privacy@digthebeard.com. California and EU/UK residents have additional rights (access, correction, deletion, portability, objection) which we honour on request.
7. Cookies
We use a secure, HttpOnly session cookie to keep you signed in and Stripe's cookies during checkout. We don't run third-party advertising trackers.
8. Children
The platform is not directed at children under 13 and we delete such accounts when identified.
9. Changes
We'll post updates here and, for material changes, notify you in-app.