Privacy notice

1. Who we are

The Collective Perspective is run by Molly Ann Graham, an individual doing business as The Collective Perspective ("we", "us"), a U.S. business in Washington State, and the Service is used by members in many countries. We're responsible for your personal information under this notice. Contact: support@thecollectiveperspective.com. The Service is offered to adults (18+) in the United States.

2. What we collect and why

• Account: your name, email address and password (stored only as a secure hash by our database provider, Supabase), any passkey you add (we keep only its public key), and when you agreed to our Terms and confirmed you're 18+. Used to create and secure your account.
• Google sign-in: if you choose "Continue with Google", Google shares your name, email address and profile photo with us, and we use them to create and run your account. We don't get your Google password.
• Date of birth: you give it at sign-up to confirm you're 18 or older. We keep it with your account.
• Profile: your handle, and anything you choose to add, such as a photo, company, job title or city. Your profile is visible to other signed-in members.
• Activity: who you follow, rooms and groups you join, likes, and the content you post. Used to run the features you use.
• Support emails: what you send us, so we can help you.

3. Identity verification (face scan)

Every member completes a one-time face scan with a photo ID, run by our identity provider, Didit, after you tick a consent box. Didit scans your ID, takes a live selfie, matches your face to your ID photo, checks your face against members who are already verified, and checks your device and IP address.

• We never store your ID images, selfie or face data. Didit holds them, as our service provider, under the schedule in our Biometric Privacy Notice.
• What we keep: your verification result (for example verified, needs review or duplicate), the Didit session reference, a record of your consent (time, notice version and IP address), how many scan attempts you've used, and one-way codes made from your ID details that stop the same person opening a second account. These codes can't be turned back into your ID details.
• Sanctions screening: U.S. law requires us to screen members against the U.S. Treasury's OFAC sanctions lists, so after a successful scan we keep your legal name, date of birth and ID-issuing country, and the screening results. We check at sign-up, after the scan, before creator payouts and daily.

4. Posts, messages and uploads

We store your posts, comments, direct messages and uploads so we can show them to the people you share them with. When you post, comment, send a message or upload a photo or video, we also record your account, the time, your IP address and your browser's user-agent, plus each uploaded file's size, type and a fingerprint (SHA-256 and MD5 hash). We use these records to keep the Service safe, investigate reports and answer valid legal process.

Photos and videos in direct messages are kept in private storage that only the two people in the conversation can open, through links that expire after about a minute. Direct messages aren't end-to-end encrypted, so they're stored on our servers and can be reviewed if they're reported or needed for legal process. Uploads are not automatically scanned today.

5. Reports and safety records

If you report something, we keep your report, the reason, any details you add, the time and your IP address. We don't tell the reported person who reported them, and we may email you about the outcome.

If content is reported or becomes part of a safety or legal case, we may keep a copy of it, and of the account involved, in restricted storage even if it's later deleted. For child-safety matters we keep it for at least 1 year, as U.S. law requires for reports to NCMEC, and longer while a legal hold or preservation request applies. Actions our team takes on a case are recorded in a tamper-evident log.

6. Payments and SENSE

• Payments are handled by Stripe. We never receive full card numbers. We keep Stripe's customer and subscription references and your membership status. If you save a card for SENSE auto top-up we keep only Stripe's reference and a label like "Visa •••• 4242".
• Creators set up payouts directly with Stripe Connect; Stripe collects their identity, tax and bank details. We keep the Stripe account reference and its status.
• SENSE: we keep a ledger of your SENSE credits (amounts, dates, whether they were purchased or bonus credits, any SENSE Savings names, icons and goals you create (we don't ask for any information about your children; a name you type is just a label you can change), and the other member or creator involved), plus refused transfers and fraud signals, to run SENSE, apply limits and prevent fraud.

7. AI features

The AI assistant and image generation use an outside AI provider, currently Google's Gemini API. When you use them, what you type (and, for images, your description) is sent to Google to produce a reply. We don't send your name or email with it. Google processes it under its own API terms, which may allow it to keep the content for a limited time and, on some service tiers, to use it to improve its products. Please don't put sensitive personal information into AI features.

Dating uses the same provider to compare what members write in their dating profiles. See the Dating Terms.

Job search sends only your search words and location to our job-listings provider, Adzuna, when that feature is on.

8. Waitlist

If you join the waitlist we store your email address and country (and, on the main page only, an optional first name), when you agreed, whether you confirmed your email, and who invited you. We use it only to tell you about your place in line and when we open in your country. We don't store your IP address with your sign-up.

9. Technical data and cookies

Like most websites, our hosting provider (Vercel) receives your IP address and basic browser details when you visit, and uses your approximate country to decide which version of the Service to show. We use Cloudflare Turnstile to tell people from bots on sign-up and the waitlist. We don't use advertising or analytics cookies. Your browser stores your sign-in session and a few settings; see the Cookie notice.

10. Who we share it with

We never sell or rent your personal information, and we don't share it for advertising. Other members see what you post and share with them. Otherwise, we share it only with:

We may also share information when the law requires it (see the next section), to protect people's safety or our rights, or as part of a transfer of the Service to a new owner such as our planned Washington LLC, which would have to honor this notice.

11. Law enforcement and NCMEC

We disclose member information to law enforcement only as described on our law enforcement page: with valid legal process, or in an emergency involving danger of death or serious physical injury. U.S. law (18 U.S.C. 2258A) requires us to report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), including information about the account involved. Legal requests go to legal@thecollectiveperspective.com.

12. How long we keep it

13. Your choices and rights

• You can ask for a copy of your information, ask us to correct it, or ask us to delete it or your account, by emailing support@thecollectiveperspective.com from your account's email address. We may need to confirm it's you. We'll answer within 30 days.
• When we delete your account we cancel its membership and creator subscriptions, delete your profile and content, and ask Didit to delete your verification session. We keep only what this notice says we must keep, such as sanctions records and preserved safety records.
• You can withdraw your biometric consent at any time; see the Biometric Privacy Notice.
• Depending on your state, you may have more rights under its privacy laws. We honor them, and you won't be treated differently for using them.
• We send emails about your account, payments and safety. If we ever send marketing emails, each will have an unsubscribe link.

14. Security

We protect your information with encryption in transit, access controls in our database (each member can only reach what they're allowed to), private storage for direct-message media, and limited staff access. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

15. Children

The Service is for adults 18 and older. We don't knowingly collect information from anyone under 18. If we learn a member is under 18, we close the account and delete their information, except anything we must keep by law. If you think a minor is using the Service, email support@thecollectiveperspective.com.

16. Where your data is

We're a U.S. business, and the Service is offered in many countries. Wherever you live, your information is transferred to and processed in the United States and wherever our providers operate, where privacy laws may differ from yours.

16A. EU and UK members (GDPR and UK GDPR)

If you're in the European Economic Area or the United Kingdom, we're the controller of your personal information, and these extra terms apply.

• Legal bases. Contract: to create and run your account and membership, take payments, provide SENSE credits and deliver the features you use. Legitimate interests: to keep the Service secure, stop fraud, bots and duplicate accounts, enforce our rules and improve the Service. Legal obligation: sanctions screening, tax and accounting records, child-safety reports and responding to valid legal requests. Explicit consent: the face scan and face match (biometric data), which you agree to with a separate box before the scan; you can withdraw consent at any time, but without the scan we can't verify you, and withdrawing doesn't affect processing already done.
• Your rights. You can ask to access, correct, delete or port your information, to restrict or object to how we use it (including anything based on legitimate interests), and to withdraw consent. Email support@thecollectiveperspective.com. We'll reply within one month, and we may need to confirm it's you. Some information we must keep by law (see the retention section).
• International transfers. Your information is transferred to the United States, which the EU and UK don't consider to have equivalent protection in general. Where our providers offer them, we rely on their transfer safeguards, such as the European Commission's Standard Contractual Clauses (and the UK addendum) or the EU-U.S. Data Privacy Framework. Where those don't apply, the transfer is made because it's necessary to provide the Service you asked for. Ask support@thecollectiveperspective.com for more information about these safeguards.
• Automated decisions. The face scan automatically checks that you match your ID and don't already have an account. If you think a decision is wrong, email support@thecollectiveperspective.com and a person will look at it.
• Complaints. You have the right to complain to the data protection authority where you live or work, or where you think a problem happened (in the UK, the Information Commissioner's Office at ico.org.uk). We'd appreciate the chance to sort it out first at support@thecollectiveperspective.com.

17. Changes

We'll update this notice when our practices change and change the date at the top. For a material change, we'll email you or tell you in the app before it takes effect.

18. Contact

Molly Ann Graham, an individual doing business as The Collective Perspective. Privacy questions and requests: support@thecollectiveperspective.com. Legal requests: legal@thecollectiveperspective.com.