← Back to Vipii
DRAFT — NOT YET IN EFFECT. This document is a working draft prepared for legal review and does not yet bind Vipii or its users. Highlighted items are placeholders awaiting counsel.

Privacy Policy

Draft — effective date [TBD at launch]

Vipii ([legal entity name, e.g. Vipii, Inc.], “ Vipii,” “we,” “us”) runs a creator-storefront platform: creators curate products, you shop through their links, retailers and affiliate networks report the resulting purchases to us, and we split the commission — including cash back to you. That only works if purchase information flows through us, so this policy is blunt about what we collect, what we do with it, and — most importantly — what the creator whose storefront you shopped can see.

1. What we collect

Account information

When you sign up (through our sign-in provider, Clerk) we receive your email address, name, and — if you sign in with a social account — your basic profile from that platform. Shoppers add a display handle; creators add a storefront profile.

Shopping activity

When you tap a product on a creator’s storefront, we record the click and mint a tracked outbound link so the retailer’s affiliate network can attribute your purchase. We collect page events on Vipii (which storefronts and products you view) to make attribution and creator insights work.

Purchase confirmations from affiliate networks

The retailers you buy from report conversions to affiliate networks (such as Impact, CJ, Levanta, Awin, and Rakuten), and those networks report them to us: typically the retailer, order amount, order identifier, commission, date, and the tracked link that led to the sale. We never see or store your payment card details — your payment relationship is with the retailer.

Receipts you choose to submit

For purchases the networks can’t attribute automatically (notably Amazon), you can submit proof of purchase — an uploaded image or an order-confirmation email you forward to our proof address. We use an AI service (Anthropic) to read the order details out of what you send, and we run automated cross-checks to catch altered or duplicate receipts. The receipt itself is stored as your proof.

Creator and payout information

Creators and agencies onboard with Stripe for payouts; Stripe collects and holds banking and identity-verification details — we store only the account reference and payout status. Creators who connect Instagram or TikTok grant us read access to their own content for importing posts; those tokens are encrypted at rest and are never used to post on their behalf. Fan gift-card redemptions and charity donations are fulfilled by Tremendous.

Device and usage data

Standard web logs (IP address, browser, pages viewed) and the cookies described in our Cookie Policy.

2. What creators can see — read this one

Sharing attribution with creators is the heart of the service, not a side effect. When your purchase is attributed to a creator’s storefront, that creator (and, if they work with one, their managing agency) can see:

  • your Vipii profile identity (display name/handle — not your email address),
  • the attributed purchase: product, retailer, order amount, and date,
  • your reward and tier status in their club, and your purchase history with their storefront over time.

Creators do notget your email address, your payment details, or your activity on other creators’ storefronts. If you are not comfortable with a creator seeing your purchases through their links, do not shop through their storefront.

3. How we use information

  • attributing purchases and calculating your cash back,
  • detecting fraud and abuse (duplicate receipts, self-purchases, altered proofs),
  • maintaining tier status and delivering perks,
  • sending the notifications you’ve opted into (each non-essential email carries one-click unsubscribe),
  • running, debugging, and improving the service.

We do not sell your personal information. [Counsel: confirm “sale/share” analysis under CCPA/CPRA given the affiliate-network data flows.]

4. Who we share with

  • Creators and their agencies — attribution, as described in section 2.
  • Affiliate networks and retailers — tracked-link identifiers travel with your click so the network can report the purchase back to us.
  • Service providers — Clerk (sign-in), Neon (database), Vercel (hosting), Stripe (creator payouts), Tremendous (gift cards and charity donations), Resend (email), Anthropic (receipt reading), analytics (PostHog). Each receives only what its job requires.
  • Charities— when a creator directs part of their earnings to a charity, the donation is made in the creator’s name; shopper identities are never shared with charities.
  • Legal — when required by law or to protect the service and its users.

5. Retention and deletion

You can delete your account at any time from your profile. Deletion takes effect after a 30-day grace window (sign back in to cancel). At deletion we scrub your personal information; transaction records are retained in anonymized form as required for financial record-keeping. Unredeemed reward balances are forfeited at deletion — we warn you first. Creators’ earned balances are paid out through the normal wind-down.

Social platform data deletion

If you connected Instagram or TikTok and want that data removed: disconnecting in your dashboard (or deauthorizing from the platform’s side) deletes the connection and its tokens, and platform-initiated deletion requests are honored automatically. You can also email privacy@vipii.shop.

6. Your choices and rights

  • Notification preferences and one-click unsubscribe live in your profile and in every email footer.
  • You can request a copy, correction, or deletion of your personal information at privacy@vipii.shop.
  • [Counsel: state-specific rights section — CCPA/CPRA, Virginia, Colorado et al. — and whether a “Do Not Sell or Share” link is required.]

7. Age

Vipii is for users [18, or 16/13 — counsel to confirm] and older. We do not knowingly collect information from children.

8. Changes

We’ll post changes here and, for material changes, notify you by email before they take effect.

9. Contact

privacy@vipii.shop · [mailing address]