ShutterBucks Privacy Policy

Effective Date: August 25, 2025

This Privacy Policy (the "Policy") applies to the website located at https://shutterbucks.com (the "Site"). This Policy describes how ShutterBucks (the "Company") uses the information it obtains about you and its other users when they visit the Site. It additionally applies to any other information that the Company acquires about you through alternate methods. If you have any questions about the Policy, please feel free to email us at hello@shutterbucks.com or to consult an attorney.

  1. Collection of information. The Company collects information from both members and non-members.

    1. Members. Members must disclose certain information when they sign up for the Site, which may include name, postal address, email address, telephone number, payment information (processed through Stripe), and date of birth for age verification purposes. At other points, the Company may contact you requesting additional information for participation in special promotions and similar offerings. If any information about you becomes inaccurate or changes, you are required to provide your updated information to the Company. The Company also collects the information listed in Paragraph 1.b. from members.

      1. Payment Processing. The Company uses Stripe as its payment processor. When you provide payment information, it is transmitted directly to Stripe and is subject to Stripe's Privacy Policy. The Company does not store credit card numbers, only tokenized references for transaction identification.

      2. Age Verification. Date of birth information is collected to ensure compliance with age restrictions (18+) and is retained as required by applicable laws.

    2. Non-members. The Company additionally collects information from members and non-members using cookies. This does not give the Company personally identifiable information but does give it your IP address, your geographic location, and your membership ID. You are free to turn off cookies. However, if you do, you may not be able to access any or all of the Site. The Company does not collect the information listed in Paragraph 1.a. from non-members.

    3. The Company may obtain additional data regarding members and non-members using third party data that you have consented to share with those third parties.

    4. The Company reserves the right to collect information about you based upon any emails, letters, or other communications or correspondence with the Company.

    5. The Company reserves the right to store information collected about you in its database.

    6. If the Company makes offers from third parties available on the Site, you understand and acknowledge that the Company's Privacy Policy does not bind those third parties. You should review the privacy policies of third parties prior to providing any information to them. If you do provide information to third parties whose goods and services are available on the Site, you consent that those third parties may share your information with the Company.

  2. Use of collected information. Information collected about you is used primarily to enhance your use of the Site, to tailor the Site to your preferences, and to ensure uninterrupted access to the Site. The Company uses cookies and stores your information in their database to accomplish that purpose. However, that is not the sole reason the Company collects information about you, as specified below.

    1. Financial. We take your safety very seriously, therefore we do not store complete payment information. We maintain only:

      1. Tokenized payment references through Stripe
      2. Transaction history and wallet balance information
      3. Payout and deposit records as required for tax and legal compliance
    2. Marketing. Cookies and other passively acquired information might be used for general market research and to track the interests of current and former Site members.

    3. Sharing information. The Company may share your information with third parties if it becomes necessary to operate the Site properly. This includes:

      1. Payment Processors: Stripe and connected payment services for transaction processing
      2. Content Delivery: Cloudflare RD for media storage and delivery
      3. Communications: Postmark for email delivery and Firebase for push notifications
      4. Security: Services to prevent or detect fraud, abuse, or security threats
      5. Legal Compliance: Lawyers, debt collectors, or entities assisting in collection of monies owed
      6. Content Creators: Transaction details shared with creators for purchases of their content
    4. Legal. We may share your information with a lawyer, a debt collector, or related entities for legal purposes, including but not limited to attempting to collect any debts you might owe the Company. We might additionally share your information to the extent necessary to ensure that you are not or to stop you from violating the terms of use, including our intellectual property policies.

    5. Civil matters involving third parties. With regard to civil matters regarding third parties, the Company will not share your information without a court order or valid subpoena. If the Company is presented with a court order or valid subpoena, it reserves the right to charge the requesting party for the time, labor, and materials expended in responding. Time and labor are charged at the rate of $100/hour.

    6. Criminal matters. The Company reserves the right to cooperate with law enforcement. This includes providing all of your information, including personally identifying information, that the Company has in its possession.

    7. The Company may provide you with notice that a third party or law enforcement has requested your information. This will provide you with an opportunity to attempt to quash any subpoena or court order. However, at the Company's discretion, it reserves the right to produce your information pursuant to any valid court order or subpoena without first notifying you.

    8. Emails between the Company and you. From time-to-time, the Company and you may transmit emails to each other.

    9. Emails to the Company should not be considered secure. Do not transmit emails to the Company that you do not want to become public.

    10. The Company may email you at the address you provided when you joined the Site. These emails could include subjects that the Company thinks you may find interesting, such as new services offered on the Site.

  3. Emails between you and the Company are not SPAM. You consummated a business relationship with the Company when you joined the Site.

  4. Your profile and content.

    1. Profile Information. Members of the Site create profiles that allow them to interact with other members of the Site. The Company cannot control who sees your information or what those people do with your information. For your own safety, DO NOT INCLUDE PERSONALLY IDENTIFYING INFORMATION IN YOUR PROFILE ON THE SITE, SUCH AS YOUR POSTAL ADDRESS AND TELEPHONE NUMBER. Please use discretion and common sense when posting information to your public profile on the Site.

    2. Content and Media. When you upload photos, videos, or other content:

      1. Media files are stored on Cloudflare R2 with temporary access URLs
      2. Sensitive content is flagged and restricted to age-verified users
      3. Transaction records link content to purchasers for access control
      4. Content metadata (upload time, file size, type) is retained
      5. Deleted content may persist in backups for up to 30 days
  5. Security and data retention.

    1. Security Measures. The Company implements industry-standard security measures including:

      1. SSL/TLS encryption for data transmission
      2. Secure token-based authentication
      3. Encrypted storage of sensitive data
      4. Regular security audits and updates
      5. Two-factor authentication options for accounts
    2. Data Breach Notification. In the event of a data breach that may compromise your personal information, the Company will notify affected users within 72 hours of discovery via email and Site notification.

    3. Data Retention. The Company retains:

      1. Account information for the duration of your membership plus 7 years for legal compliance
      2. Transaction records permanently for tax and legal requirements
      3. Content and media as long as posted, plus 30 days after deletion
      4. Communication logs for 2 years
      5. Security and access logs for 1 year
    4. Disclaimer. No security system is perfect. The Company cannot guarantee that its systems will never be infiltrated. You acknowledge and accept all risk that breaches may occur even with these protections in place.

  6. Revisions to the Policy. The Company reserves the right to, and may, revise the Policy from time-to-time. By accessing, using, or joining the Site, you agree that the Company possesses this right.

    1. If the Company makes any revisions to this Privacy Policy, it will indicate the date of such revision on the "Modified Date" heading at the top of this page. If you notice a new "Modified Date" heading, you will review the Privacy Policy for changes before you proceed in accessing the Site.

    2. You acknowledge and agree that, each time you access the Site, you will be bound by the terms of the Privacy Policy in place at the time.

  7. International users and data transfers.

    1. Data Location. The Company's servers and data processing occur primarily in the United States. By using the Site, you consent to the transfer and processing of your information in the United States.

    2. International Compliance. While the Company operates primarily under U.S. law, we respect international privacy rights and will respond to verified requests under applicable laws such as GDPR or CCPA.

  8. Your privacy rights.

    1. Access and Correction. You may request access to or correction of your personal information by contacting hello@shutterbucks.com.

    2. Deletion. You may request deletion of your account and associated data, subject to legal retention requirements.

    3. Data Portability. You may request a copy of your data in a machine-readable format.

    4. Opt-Out. You may opt out of promotional communications at any time through account settings or email unsubscribe links.

  9. Children's privacy.

    The Site requires users to be at least 18 years old. If we discover we have collected information from a child under 18, we will delete it immediately.

  10. Binding agreement. By accessing, using, or joining the Site, you acknowledge that you shall be bound by the terms of this Policy and that you will stay up-to-date regarding changes to this Policy by checking it on a regular basis.