Privacy Policy

WhatUPB is operated by Aurora Bridge LLC. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using WhatUPB, you agree to the practices described below.

1. Information We Collect

We collect the following information when you use WhatUPB:

• Account information: your email address and username when you create an account.
• Messages: anonymous messages sent to and from your profile. Messages sent anonymously cannot be traced back to the sender.
• Hashed IP addresses: we store one-way hashes of IP addresses for spam and abuse prevention. We do NOT store raw IP addresses.
• Payment information: if you subscribe to a paid plan, payment is processed entirely by Stripe. We do not store your credit card number, bank account details, or any sensitive financial information on our servers.
• Age verification: we record that you confirmed you are 18 or older. We do not store your date of birth.

2. How We Use Your Information

• To provide and maintain the WhatUPB service.
• To prevent abuse and spam using hashed IP addresses and automated content moderation.
• To process payments and manage subscriptions via Stripe.
• To send important account-related emails (e.g., email confirmation, security alerts).
• To enforce our Terms of Service and Content Policy.

3. Anonymity of Messages

Messages sent through WhatUPB are anonymous. We do not store sender identity information with messages. Recipients cannot see who sent them a message, and we cannot trace anonymous messages back to the sender.

4. Automated Content Moderation

We use the Google Perspective API to automatically analyze messages for toxic, threatening, or abusive content. This processing happens in real time when a message is submitted. Messages that exceed our toxicity thresholds may be blocked automatically. No human reviews your messages.

5. Payment Processing

All payment processing is handled by Stripe. When you subscribe to a paid plan, your payment information is collected and processed directly by Stripe in accordance with their Privacy Policy. We receive only limited information from Stripe, such as subscription status and the last four digits of your card, to display in your account settings.

6. Third-Party Services

We use the following third-party services to operate WhatUPB:

• Stripe — payment processing (stripe.com/privacy)
• Google Perspective API — automated content moderation
• Supabase — authentication and database
• PostHog — product analytics (posthog.com/privacy)
• Sentry — error monitoring and performance tracking (sentry.io/privacy)

7. Cookies and Authentication

We use Supabase for authentication. Cookies are used solely to maintain your login session and are essential for the service to function. We do not use tracking cookies or third-party advertising cookies.

8. Data Retention

We retain your account information and messages for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or security purposes (e.g., hashed IP data used for abuse prevention).

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Opt out of non-essential data collection (note: we do not currently engage in non-essential data collection).

To exercise any of these rights, contact us at contact.whatupb@gmail.com.

10. CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell your personal information. To submit a request, email us at contact.whatupb@gmail.com.

11. GDPR (European Residents)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR) including the right to access, rectify, erase, restrict, and port your data. Our legal basis for processing your data is the performance of our contract with you (providing the service) and our legitimate interest in preventing abuse. To exercise your GDPR rights, contact us at contact.whatupb@gmail.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through the service. Your continued use of WhatUPB after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact Aurora Bridge LLC at contact.whatupb@gmail.com.