effant Privacy Policy

DRAFT for legal review — not yet in effect. Items in [brackets] are placeholders.

Version: 2026-10-29-draft

This policy explains what information Effant LLC ("effant") collects, why, and who we share it with.

Information we collect

• Account information: your email address, username, name, and whether you joined as a business or a developer. Your password is stored by our sign-in provider (Supabase) only as a one-way hash, so nobody at effant can see it. Your username is used to sign in and is not shown publicly.
• Business profile: your business name, type, city, number of locations, point of sale system, and anything else you choose to add, such as hours, menu items, and staff contacts.
• Developer applications: your bio, links, skills, and the information you submit to be reviewed.
• Public profiles: the photo or logo, headline, description, skills, experience, and links you choose to add. Anyone can see your public profile; businesses can turn theirs off.
• Requests for custom work: what you post, your messages with the developer or business, deliveries, payments, and reviews, and requests you mark “I need this too” (others see only how many businesses did, not who).
• Purchases and payments: what you bought, prices, and payment status. Card details are handled by Stripe and never reach effant.
• Support and refund requests: messages you send and the outcome.
• Security and usage data: sign-in events, IP address, device and browser information, and when you open software through effant, used to protect accounts, prevent fraud, and resolve disputes.
• Site analytics: which pages you visit, buttons you click, and roughly where you are (city or region from your IP address), collected with PostHog so we can see how people use effant and improve it. We don't record what you type into forms or record your screen, and we honor your browser's Do Not Track setting.

How we use it

To run the marketplace: vetting sellers, processing purchases, connecting you to the software you buy, providing support, deciding guarantee claims, preventing fraud and abuse, keeping effant secure, and meeting legal obligations.

Who we share it with

• Sellers you buy from: your email, name, business profile, and setup answers, so their software works for you. Sellers may use it only to provide that software.
• Developers and businesses you work with on requests: developers see the requests you post with your business name, type, and city; once a developer takes your request, you both see your messages, the delivery, and each other's reviews.
• Everyone: your public profile, and reviews from completed jobs and purchases.
• Stripe: to process payments and verify sellers' identities.
• Service providers that host and operate effant for us, such as [Supabase] (database and sign-in), [Vercel] (hosting), and [PostHog] (site analytics), under agreements that protect your information.
• Authorities when the law requires it.

We do not sell your personal information.

Security

We use encryption in transit (HTTPS), access controls that limit each account to its own data, emailed confirmation codes for administrators and for sellers' payout and connection settings, signed and verified connections with sellers and Stripe, and rate limiting to prevent abuse. No system is perfectly secure; we will notify affected users of a breach as required by law.

Retention

We keep account and purchase records while your account is open and for as long as needed for taxes, disputes, and legal obligations [period to be decided]. Security logs are kept for [period].

Your choices and rights

You can view and update your profile in your account. You can stop site analytics by turning on Do Not Track in your browser or using a content blocker. You can ask us to export or delete your information by contacting [privacy contact email]. Depending on where you live you may have additional rights, such as under the California Consumer Privacy Act.

Contact

Effant LLC, [address], [privacy contact email]