Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Identity information: Legal name, date of birth, government-issued ID (for KYC / identity verification), and tax identification number.
• Contact information: Email address, phone number, and mailing address.
• Financial information: Payout account details (PayPal, bank account for ACH, or Interac e-Transfer for Canadian residents), and the amounts and terms of your brand deal contracts.
• Business documents: Signed brand deal agreements, deliverable confirmations, and related correspondence you upload when submitting a deal.
• Social account information: Handles, URLs, and platform identifiers you provide during onboarding so we can verify ownership of your creator channels.

1.2 Information collected automatically

• IP address, browser type, device identifiers, and referring URL collected via standard server logs when you use our platform.
• Usage data: pages viewed, actions taken, and timestamps within the platform.

1.3 Information from third parties

• Identity verification: We use Didit to verify government-issued ID. Didit may share verification results and associated identity attributes with us.
• Social verification: We use byCrawl and related services to confirm you own the social channels connected to your account.
• Brand credit data: We use Apollo.io and similar business intelligence providers to assess the creditworthiness of the brand (not you) before purchasing a receivable.

2. How We Use Your Information

• Providing the service: Evaluating, purchasing, and servicing your brand deal receivables.
• Identity verification (KYC): As required by applicable financial regulations and our internal compliance program.
• Risk assessment: Evaluating the creditworthiness of the brand you have a contract with — this is credit assessed on the brand, not on you personally.
• Communications: Sending you deal status updates, payment confirmations, and important account notices via email.
• Legal and regulatory compliance: Maintaining records as required by U.S. and Canadian financial services law, including anti-money-laundering (AML) obligations.
• Fraud prevention and security: Detecting and preventing fraudulent submissions, document tampering, or unauthorized account access.
• Platform improvement: Analyzing aggregate, de-identified usage data to improve our product. We do not sell your personal data for advertising purposes.

3. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

• Service providers: We share data with vendors necessary to operate the platform, including Didit (identity verification), byCrawl (social verification), Apollo.io (brand credit), Resend (transactional email), PayPal / Stripe / VoPay (payment processing), and Supabase (infrastructure). These vendors are contractually bound to use your data only to provide services to us.
• The brand: We share your verified identity and delivery confirmation with the brand you have a deal with, as necessary to execute the factoring transaction and obtain their acknowledgment.
• Legal obligations: We may disclose information if required by law, court order, or to protect our legal rights.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to equivalent privacy protections.

4. Your Rights

4.1 U.S. residents (including California)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to: (a) know what personal information we collect and how we use it; (b) request deletion of their personal information; (c) opt out of the sale or sharing of personal information (we do not sell personal information); (d) correct inaccurate personal information; and (e) non-discrimination for exercising these rights.

Residents of other U.S. states with applicable privacy laws (Virginia, Colorado, Connecticut, Texas, etc.) have similar rights under their respective state laws.

4.2 Canadian residents

We collect, use, and disclose personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to access the personal information we hold about you and to request corrections if it is inaccurate, incomplete, or misleading.

4.3 Exercising your rights

To submit a privacy request, email us at privacy@MajorPaid.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

5. Data Retention

We retain your personal information for as long as your account is active and for a period thereafter as required by applicable law. Financial and transaction records (including KYC data) are retained for a minimum of 5 years after your last transaction, consistent with AML/KYC regulatory requirements in the United States and Canada.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and row-level security on our database. No system is perfectly secure — if you believe your account has been compromised, contact us immediately at security@MajorPaid.com.

7. Children

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

9. Contact Us

MajorPaid Capital, Inc.
Wyoming, United States
privacy@MajorPaid.com