Privacy Policy

What we collect, what is public, and who we share it with.

Draft — under review, not yet in force

This document is published for review and is not the final policy. Some details are still to be confirmed and are marked as such. It does not yet create binding obligations for either you or us.

1. Who we are

[Operating entity to be confirmed] operates you.new and is responsible for the information described here. Privacy questions: [privacy contact email to be confirmed]

2. Who this covers

Two different groups of people:

Members — people with a you.new account who build pages.
Visitors— anyone who opens a member’s public page. Visitors need no account and we ask them for nothing.

3. What we collect from members

Account information. Your email address, and authentication data handled by our hosting provider. We do not store your password.
Profile information you enter. Display name, username, biography, job title, location, profile and background images, social links, and the content of the cards on your page.
Account settings. First and last name, country and phone number, where you provide them.
Purchase records. What you bought, when, and the order reference. We never see or store your card details — payment is handled entirely by the payment provider.
Referral information. Who referred you and who you have referred, used to calculate commission.

4. What is public

Your page content is publicly readable. That includes your display name, username, biography, job title, location, images and every card on your page.

Setting a page to Hidden removes it from the website, but the underlying data remains technically readable. Hidden means “not shown”, not “erased”. Do not use a hidden page to store anything private.

Some of your profile is visible to other members in your referral network even when you have opted out of the member directory — specifically, your membership in someone’s downline. The directory toggle controls whether you are listed by name, not whether the connection exists.

Your email address, phone number, country, purchase history and account settings are not public.

5. What we collect from visitors

Page analytics.When someone opens a member’s page or clicks a card we record which page, which card, and when. We do notrecord the visitor’s IP address, browser, device or location, and we do not build a profile of them.
A referral cookie. If someone arrives through a referral link we store a cookie naming the referring member for 30 days, so that member is credited if the visitor registers. It holds no personal information about the visitor.
Authentication cookies. Members’ sessions are maintained with cookies set by our hosting provider. These are strictly necessary for signing in.
Reports. If someone reports a page we record their IP address to prevent abuse of the reporting system, along with the reason given and any detail they type. See section 7.

6. Why we process this

Providing your account and publishing your page — to perform our contract with you.
Taking payment and calculating commission — to perform our contract with you.
Keeping the service safe and moderating content — our legitimate interest, and our legal obligations.
Understanding how pages perform — our legitimate interest, in aggregate form.
Service messages about your account — to perform our contract with you.

[The privacy regime that applies, and the corresponding lawful bases, to be confirmed]

7. Content moderation

We check content published through you.new against our Acceptable Use Policy.

What we record

When content is reported, flagged or removed we record what was acted on, what the decision was, who made it and when. Where a report comes from a visitor we record their IP address to prevent abuse of the reporting system.

Automated screening

Where enabled, images and text you publish are sent to a third-party classification provider to check for the content described in the Acceptable Use Policy. We send the content itself and nothing about your account. Your content is not used to train the provider’s models.

Moderation records are kept [retention period to be confirmed].

8. Who we share information with

We do not sell your information. We share it only with providers who help us run the service: our hosting and database provider, our application hosting provider, our payment and CRM provider, our content classification provider where automated screening is enabled, and the operators of any tools you embed on your page.

[Each provider to be named individually before this policy is finalised]

Embedded tools are your responsibility. Widgets and chat tools you add to your page are operated by third parties, collect data directly from your visitors, and are governed by their own privacy policies — not this one. If you embed them, you should tell your visitors.

We also share information where the law requires it, or to protect the safety of people using the service.

9. Where information is held

[Data location and international transfer safeguards to be confirmed]

10. How long we keep things

Account and page content — while your account is open.
Page content after deletion — removed from the service; backup copies expire on the provider’s schedule.
Uploaded images — until you delete them or we remove them. Deletion is permanent.
Purchase and commission records — as long as required for tax and accounting.
Page analytics and moderation records — [retention periods to be confirmed]

11. Your rights

Depending on where you live, you may have the right to access a copy of your information, correct it, delete it, object to or restrict how we use it, take it elsewhere in a portable form, and complain to your data protection regulator.

To exercise any of these, contact [privacy contact email to be confirmed].

Some information cannot be deleted on request — for example records we must keep for tax, or moderation records relating to a serious breach.