Privacy Policy

This policy is maintained by Brand Deal Diary (operated by Leaf & Learn) and describes what we collect and how we use it. It is not a certification.

1. What we collect

Account info: email address, password (hashed), and any profile details you add. Member submissions: rate cards, casting posts, saved campaigns, and associated screenshots. Billing: Stripe stores your payment details; we store only your Stripe customer ID and subscription status.

2. How we use it

To operate the service — authenticate you, show you rate cards and campaigns, process subscriptions, moderate submissions, and send transactional email (submission status, receipts, password resets).

3. Sharing

Member-submitted rate cards are visible to other logged-in members. We do not attach your name or email to your submissions when other members view them. We do not sell your data.

4. Subprocessors

We rely on: Supabase (database, auth, storage), Stripe (payments), Resend / Lovable Cloud email (transactional email), and Cloudflare (hosting). Each processes limited data on our behalf.

5. Retention

Account and submission data is retained while your account is active. If you delete your account, we remove personal identifiers within 30 days; anonymized member-contributed deal data may remain in the database so the community benefit is preserved.

6. Your choices

You can update or delete your account by emailing taylor@leafandlearn.com. Billing is managed in Circle (profile photo → Settings → Billing).

7. Security

We use Supabase Row-Level Security to scope access to your own data, TLS for data in transit, and hashed passwords. No system is perfectly secure; report suspected issues to the email above.

8. Children

Brand Deal Diary is not intended for anyone under 18.

9. Changes

Material changes will be announced by email or in-app notice.