Privacy Policy

Who We Are

CherryIt ("CherryIt", "we", "us", or "our") operates the CherryIt platform and website at cherryit.app. We are the data controller responsible for the personal data you provide when using our services.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@cherryit.app.

Data We Collect

We collect personal data in the following ways:

• Account information. When you register, we collect your name, email address, and password (stored as a secure hash).
• Profile information. Influencers may provide a profile photo, bio, and links to social media accounts (Instagram, TikTok).
• Payment information. We use Stripe to process payments. CherryIt does not store full card numbers or bank account details. Stripe may collect and store payment data subject to their own privacy policy.
• Transaction data. Records of vouchers purchased, campaigns created, and payouts received.
• Communications. Messages you send us via email or support forms.
• Usage data. Pages visited, features used, timestamps, and browser/device information collected automatically when you use the platform.
• Cookies and similar technologies. See Section 8 for details.

How We Use Your Data

We use the personal data we collect to:

• Create and manage your account and provide the CherryIt service.
• Process payments and payouts via Stripe.
• Display influencer profiles and campaigns to potential customers.
• Send transactional emails (account confirmation, voucher receipts, payout notifications).
• Respond to your support requests and communications.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Analyse usage patterns to improve the platform.
• Comply with legal obligations.

We do not sell your personal data to third parties.

Legal Basis for Processing

Where the GDPR or equivalent legislation applies, we rely on the following legal bases:

• Contract performance. Processing necessary to provide the service you have signed up for (e.g. account management, payments, voucher fulfilment).
• Legitimate interests. Analytics, fraud prevention, and platform security — where our interests do not override your rights.
• Legal obligation. Retaining financial records as required by tax and accounting law.
• Consent. Where we ask for your consent (e.g. optional marketing emails), you may withdraw it at any time.

Sharing Your Data

We share personal data only in the following circumstances:

• Stripe. Payment processing and, for influencers, Stripe Connect onboarding. Stripe's privacy policy governs their handling of your data.
• Service providers. Hosting, analytics, and email infrastructure providers acting as data processors under agreements that require them to protect your data.
• Partner businesses. When a customer purchases a voucher, limited order information (e.g. voucher code, redemption status) is shared with the relevant partner business to enable fulfilment.
• Legal requirements. We may disclose data if required by law, court order, or to protect the rights and safety of CherryIt, our users, or the public.
• Business transfers. If CherryIt is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. When you close your account:

• Profile and campaign data is deleted or anonymised within 90 days.
• Transaction and financial records are retained for 7 years to comply with tax and accounting obligations.
• Backup copies may persist for up to 30 additional days before being purged from our systems.

You may request early deletion of your data at any time (subject to legal retention requirements) by contacting us at hello@cherryit.app.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete data.
• Erasure. Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Restriction. Ask us to restrict processing of your data in certain circumstances.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests.
• Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@cherryit.app. We will respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with your local data protection authority.

Cookies & Tracking

We use cookies and similar technologies to operate and improve the platform. These fall into three categories:

• Essential cookies. Necessary for authentication, session management, and security. These cannot be disabled.
• Analytics cookies. Help us understand how visitors use the platform (e.g. pages visited, time on site). We use anonymised, aggregated data only.
• Preference cookies. Remember settings such as your chosen language.

You can control non-essential cookies through your browser settings. Disabling cookies may affect some platform functionality.

Children's Privacy

CherryIt is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@cherryit.app and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via an in-app notice at least 14 days before the changes take effect. The "Effective" date at the top of this page will always reflect the date of the latest revision.

Continued use of CherryIt after the effective date constitutes acceptance of the updated policy.

Contact & Data Controller

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

• Email: hello@cherryit.app