Your page can be public. Your data practices should not be a mystery.

1. Scope and launch status

This notice covers the ShowMyBio website, future account workspace, public profiles, support channels, API, and related services. The current site is a pre-launch surface. Account, payment, support-intake, and production analytics flows must be verified before this notice is treated as a description of live processing.

The final notice will identify the operating legal entity, contact channel, relevant jurisdiction, subprocessors, international-transfer mechanism, and any region-specific rights before paid checkout opens.

2. Information we expect to process

• Account data: name, verified email address, sign-in identifiers, session and security events, and account preferences.
• Profile content: usernames, biographies, links, page and block content, images, files, form configuration, social details, connected domains, and styling choices you provide.
• Billing metadata: customer and subscription identifiers, plan, status, invoice references, and limited payment-method metadata received from Stripe. ShowMyBio does not intend to store full card numbers.
• Usage and analytics data: page visits, interactions, referrers, approximate location derived from network information, device and browser signals, bot classifications, and owner-preview markers.
• Support and safety data: messages, attachments, abuse reports, moderation decisions, appeals, and the evidence needed to investigate them.
• Integration data: identifiers, tokens, and content needed for services you deliberately connect, such as Instagram, custom domains, pixels, or third-party embeds.

3. Why we use information

We expect to use information to provide and secure accounts; render and deliver public profiles; operate publishing, domains, media, analytics, API, billing, export, and deletion; answer support; prevent spam, fraud, phishing, malware, and abuse; comply with law; and improve reliability and usability.

A final launch version will state the applicable legal bases where law requires them and distinguish service-essential processing from optional analytics or marketing consent.

4. Public content and visitor choices

Content you publish to a public profile is intended to be visible to anyone with its URL and may be indexed, cached, embedded, or reshared by third parties. Draft and private workspace content must not be treated as public unless you publish it or configure an integration to send it elsewhere.

Profile owners are responsible for giving appropriate notice and obtaining permission before collecting visitor information through forms, pixels, embeds, scheduling tools, or other connected services.

5. Cookies and similar technologies

ShowMyBio expects to use service-essential cookies or local storage for sign-in, security, preferences, billing handoff, and abuse prevention. Optional analytics, attribution, advertising pixels, or profile-owner scripts must be separated from essential storage and exposed through appropriate visitor controls where required.

The final cookie disclosure will list the deployed technologies, provider, purpose, and duration. This draft does not claim that a consent manager or every optional integration is live today.

6. Service providers and transfers

The intended stack uses specialist providers for hosting, database storage, authentication, payment processing, media, email, observability, and abuse prevention. Vendors may process information only for contracted purposes and under appropriate safeguards. A verified subprocessor list and transfer disclosures will be published before production processing begins.

7. Retention, export, and deletion

Launch requirements include authenticated data export, profile and account deletion with reauthentication, a disclosed recovery window, downstream deletion jobs, billing coordination, and revocation of domains and API keys. Operational logs, transaction records, moderation evidence, backups, and legally required records may follow different documented periods.

Exact retention periods and the production request path are not yet final. Do not rely on this pre-launch page as proof that an export or deletion request has been executed.

8. Your choices and rights

Depending on location, you may have rights to access, correct, export, delete, restrict, or object to certain processing, or to withdraw consent. The account workspace and a verified privacy contact will provide the primary request paths. We will authenticate requests and may retain limited records where law, security, or dispute resolution requires it.

9. Security and age boundary

ShowMyBio is being designed with managed authentication, least-privilege provider access, encrypted transport, secret separation, audit trails, and fail-closed private routes. No service can promise absolute security. The service is not intended for anyone under 18 at launch, and we do not knowingly seek children’s personal information.

10. Changes and contact

Material changes will be dated and, where appropriate, presented inside the product before taking effect. A verified privacy address and the operating entity’s postal details will be added before public account access opens. Until then, the support page is the authoritative place to check channel readiness; do not send sensitive information to an unverified address.