Legal

Privacy Policy

Last updated: April 2026. We take your privacy seriously. Here's exactly what we collect, why, and how it's protected.

No data sold
No ad tracking
TLS 1.3 + AES-256
RLS on all tables

1. Information We Collect

We collect information you provide directly: email address, Reddit username, PayPal email or crypto wallet address, and any proof-of-completion URLs or screenshots you submit. We also collect automatically: IP address, device fingerprint, browser type, session data, and activity logs within the Platform. We do not collect your Reddit password or any OAuth tokens beyond what is required for account verification.

2. How We Use Your Information

We use collected information to: verify your identity and Reddit account authenticity; process and pay out task earnings; detect fraud, bot activity, and platform abuse; send transactional notifications (task approvals, rejections, payouts); improve platform features and user experience; comply with legal obligations. We do not sell your personal data to third parties.

3. Reddit Data

When you link your Reddit username, we use Reddit's public JSON API to verify account existence, karma, account age, and post/comment activity in specified subreddits. We do not access your Reddit inbox, private messages, or vote history. We do not store Reddit access tokens. All Reddit data retrieved is used solely for task verification.

4. Cookies & Tracking

We use essential session cookies to maintain your authenticated state across the Platform. We do not use advertising cookies or cross-site tracking. We use Supabase for authentication, which may set its own session cookies subject to Supabase's privacy policy. You may disable cookies in your browser, but this will prevent you from using authenticated features.

5. Device Fingerprinting

We collect a device fingerprint (combination of browser, OS, screen resolution, and hardware identifiers) to detect multi-account fraud and bot activity. This fingerprint is stored as a one-way hash and is not used for advertising purposes. Multiple accounts sharing the same fingerprint may be flagged for review.

6. Data Sharing

We share data with: Supabase (database and authentication infrastructure); payment processors (PayPal, supported crypto networks) as needed to execute withdrawals; fraud detection services; legal authorities when required by valid legal process. All third-party processors are contractually bound to handle your data in accordance with applicable privacy law.

7. Data Retention

Account data is retained for the duration of your account plus 90 days after deletion to comply with financial record-keeping requirements. Proof screenshots are deleted after 180 days. Wallet transaction records are retained for 7 years for tax and audit compliance. You may request deletion of non-financial personal data at any time.

8. Security

We implement industry-standard security measures: TLS 1.3 encryption in transit; AES-256 encryption at rest; Row-Level Security (RLS) on all database tables; regular penetration testing; automated anomaly detection. No system is completely secure. If a breach occurs affecting your data, we will notify you within 72 hours of discovery as required by applicable law.

9. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; object to certain processing; request data portability. To exercise these rights, email privacy@subredditpro.com. We will respond within 30 days.

10. Children's Privacy

SubredditPro is not directed at or intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has registered, we will immediately suspend the account and delete associated data.

11. International Transfers

SubredditPro operates globally. Your data may be processed in countries outside your home jurisdiction. Where applicable, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data receives adequate protection regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent in-platform notice at least 14 days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

Privacy Requests

To exercise your data rights or report a privacy concern, contact us at privacy@subredditpro.com. We respond within 30 days. For security vulnerabilities, email security@subredditpro.com.

© 2026 SubredditPro. All rights reserved.