Privacy Policy · Ballyhoo

1. What we collect

From everyone with an account

Your email address and the sign-in codes we send to it.
Your name and whether you joined as a Brand or a Host.

From Hosts

Your Whatnot username, the categories you sell, and your answer about Whatnot category approval.
The shipping address where Brands send your free samples.
Your payment card, which is collected and stored by Stripe. We keep only a reference to it, which lets us show its brand and last four digits.
The sales you report and their details, including Whatnot order numbers and sale prices.

From Brands

Your brand name, website, categories, products, prices, approved claims, and documents you upload.
Your Stripe payout account, which Stripe collects and verifies. We receive its status and identifiers, not your bank details.
Your Shopify store address and the access Shopify grants us, and the details of Ballyhoo orders in your store.

About buyers

When a Host reports a sale, they give us the buyer's name and shipping address so the Brand can ship the order. We don't receive buyers' email addresses, phone numbers or payment information.

Automatically

Basic technical information such as IP address, browser, pages visited and timestamps, which our hosting and database providers log for security and reliability. We use only the cookies needed to keep you signed in and remember your choices. We don't use advertising cookies or trackers.

2. How we use it

To run Ballyhoo: match Brands and Hosts, ship samples, create and track orders, bill Hosts and pay Brands.
To prevent fraud and abuse, for example by reviewing unusual sales, enforcing spending limits and handling disputes.
To send you sign-in codes and messages about your account, orders and these policies.
To improve Ballyhoo and understand how it's used.
To meet legal, tax and accounting obligations.

3. Who we share it with

Brands and Hosts, as needed for a sale. Brands see an approved Host's name, handle and sample shipping address, and each buyer's name and shipping address for the orders they fulfill. Hosts see Brands' products and order status.
Service providers that process data for us: Supabase (database and sign-in), Vercel (hosting), Stripe (payments and payouts), Shopify (creating orders in Brands' stores), and Resend (email delivery). They may use it only to provide their services to us.
For legal reasons, when required by law or to protect the rights, safety or property of our users, buyers, the public or Ballyhoo Live, Inc..
In a business transfer, such as a merger or sale, subject to this policy.

We don't sell personal information or share it for cross-context behavioral advertising. Brands may use buyer information only to fulfill the order it came with, as our Terms require.

4. How long we keep it

We keep account information while your account is open. We keep order, billing and payout records as long as needed for accounting, tax and dispute purposes, generally up to 7 years, and buyer shipping addresses only as part of those order records. When you close your account, we delete or de-identify what we no longer need.

5. Security

We use access controls, encryption in transit, and row-level permissions so users can see only their own data. Card and bank details stay with Stripe. No system is perfectly secure; if we learn of a breach affecting you, we'll notify you as the law requires.

6. Your choices and rights

You can update your profile, card and payout details in your account. You can ask us to access, correct or delete your personal information, or to close your account, by emailing legal@ballyhoolive.com. We'll verify the request comes from you and respond within 45 days.

California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing (we don't sell or share it). We won't discriminate against you for using these rights. An authorized agent can make a request for you with your written permission.

Buyers who want their information corrected or deleted can email us; we'll handle it along with the Brand that shipped the order.

7. Children

Ballyhoo is for businesses and adults. We don't knowingly collect information from anyone under 18.

8. Where data is stored

Ballyhoo is run from, and our providers store data in, the United States.

9. Changes and contact

We'll post updates here and, for material changes, tell you by email or in the app before they take effect. Questions or requests: legal@ballyhoolive.com. Ballyhoo Live, Inc..