Privacy Policy.

Tribora ("Tribora", "we", "us", or "our") is a creator platform for communities, memberships, live rooms, events, and replays. This Privacy Policy applies to all Tribora websites, applications, and services (together, the "platform").

We collect only what we need to run the platform well. We never sell your personal data, we do not run third-party advertising networks, and we design features so that private community content stays inside the community that created it.

By using Tribora, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

We collect information in three ways:

Information you provide

• ·Account details: email address, password (stored as a secure hash by our authentication provider), display name, username, and profile photo.
• ·Content you create: posts, comments, polls, messages, community pages, products, event listings, live sessions, and replays.
• ·Creator business details: payout and identity information you submit to Stripe during Connect onboarding (collected and held by Stripe, not by Tribora).
• ·Communications: messages you send to our support team.

Information collected automatically

• ·Usage data: pages visited, features used, communities joined, content watched, and interaction events such as votes and reactions.
• ·Device and log data: IP address, browser type, operating system, device identifiers, timestamps, and error logs.
• ·Live session data: participation records (join and leave times), and recordings when a host records a session.

Information from third parties

• ·Transaction records from Stripe: payment status, amounts, currency, and the last four digits and brand of a card. Never the full card number.
• ·Authentication data from our sign-in provider when you create or access your account.

We do not buy personal data from data brokers.

We use your information to:

• ·Provide the platform: run your account, render communities, deliver purchased content, host live rooms, and process replays.
• ·Process payments and payouts through Stripe, including fraud prevention and dispute handling.
• ·Send service communications such as receipts, payout notices, live session reminders, and security alerts.
• ·Personalize your experience, such as surfacing communities and replays relevant to you.
• ·Keep the platform safe: detect abuse, enforce our Terms of Service, and protect users and creators.
• ·Improve the product by understanding how features are used, in aggregate.
• ·Comply with legal obligations, including tax, accounting, and lawful requests from authorities.

We do not use the content of your private communities to train external AI models. Where AI features generate summaries or transcripts of your content, the output stays scoped to the community or replay that produced it.

We use a small set of cookies and similar technologies that are necessary for the platform to function:

• ·Session cookies to keep you signed in securely.
• ·Preference cookies to remember settings such as your workspace and interface choices.
• ·Security cookies to protect against cross-site request forgery and abuse.
• ·First-party analytics identifiers to understand basic, aggregate usage (see Section 5).

We do not use third-party advertising cookies or cross-site tracking pixels, and we do not engage in cross-site fingerprinting. You can control cookies through your browser settings; blocking essential cookies may prevent you from signing in.

We measure how the platform is used so we can improve it. Analytics on Tribora is limited and privacy-conscious:

• ·We collect aggregate usage metrics such as page views, feature adoption, session counts, and watch progress.
• ·Creators see aggregated statistics about their own communities and content (for example, member counts, replay views, and earnings summaries). Creators do not receive your payment details.
• ·Analytics data is not sold or shared with advertisers.

Where we use an analytics processor, it acts under contract on our behalf and may not use your data for its own purposes.

We send two kinds of communications:

• ·Transactional messages: purchase receipts, payout confirmations, security notices, live session reminders for events you joined, and important account or policy updates. These are part of the service and cannot be fully opted out of while you hold an account.
• ·Optional messages: product news, creator tips, and community digests. You can opt out of these at any time via the unsubscribe link in each email or in your notification settings.

Creators may also message their own members through the platform. Creators are responsible for using member communication tools respectfully and lawfully.

We work with a small number of specialized providers to run Tribora. Each receives only the data it needs to perform its function:

• ·Stripe — payments and payouts. All card payments are processed directly by Stripe, which is PCI-DSS Level 1 certified. Your full card number is never transmitted to or stored on Tribora servers; we store only the transaction references and summaries Stripe returns. Creators receiving payouts share identity and banking details directly with Stripe under the Stripe Connected Account Agreement. See Stripe’s privacy policy at stripe.com/privacy.
• ·Authentication provider — secure account sign-in and credential storage.
• ·Media infrastructure — image, video, and recording storage, processing, and delivery (for uploads, live sessions, and replays).
• ·Live streaming infrastructure — real-time audio and video for live rooms.
• ·Email delivery provider — sending the communications described in Section 6.
• ·Cloud hosting and database providers — running the platform and storing data described in this policy.

These providers process data under contracts that restrict use of your information to providing services to Tribora.

We never sell your personal data. We share information only:

• ·With service providers listed in Section 7, to operate the platform.
• ·With creators, limited to what they need to run their communities: your display name, profile, membership status, and your activity inside their community. Creators never receive your password or payment card details.
• ·With other members, according to your actions: content you post in a community is visible to that community’s audience per its settings.
• ·For legal reasons: to comply with applicable law, respond to valid legal process, enforce our Terms, or protect the rights, safety, and property of users, creators, or Tribora.
• ·In a business transfer: if Tribora is involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction; this policy will continue to apply until it is updated per Section 14.

We protect your information with technical and organizational measures, including:

• ·Encryption in transit (HTTPS/TLS) across the entire platform.
• ·Password storage as secure hashes via our authentication provider — we never store plaintext passwords.
• ·Payment card isolation: card data goes directly to Stripe and never touches Tribora servers.
• ·Access controls that limit which personnel and systems can reach personal data.
• ·Monitoring, logging, and regular review of our infrastructure for vulnerabilities.

No online service can guarantee absolute security. If we learn of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

We keep personal data only as long as it is needed:

• ·Account data is retained while your account is active.
• ·Content you delete is removed from the platform; residual copies in backups are purged on a rolling schedule.
• ·Transaction and payout records are retained for as long as required by tax, accounting, and anti-fraud laws, even after account deletion.
• ·Log and analytics data is retained for a limited period and then deleted or aggregated.

When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required or needed to resolve disputes and enforce agreements.

Where permitted by applicable law, you have the right to:

• ·Access — ask what personal data we hold about you.
• ·Export — receive a copy of your data in a portable format.
• ·Correction — update inaccurate information. Most profile details can be edited directly in your account settings.
• ·Deletion — delete your account and personal data, subject to the legal retention described in Section 10.
• ·Objection and restriction — object to or restrict certain processing where the law provides that right.
• ·Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, use your account settings or email support@tribora.net. We verify requests to protect your account and respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Tribora is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Users must be at least 13 years old, and where local law requires parental consent for users under a higher age, that consent is required.

• ·Users under 18 may use Tribora only with the permission and supervision of a parent or legal guardian.
• ·Only users 18 or older (or the age of majority in their jurisdiction) may act as creators who sell content or receive payouts through Stripe.
• ·If we learn that we have collected personal data from a child under 13 (or under the applicable minimum age), we will delete it promptly. Parents or guardians who believe this has happened should contact support@tribora.net.

Tribora is used by creators and members around the world. Your information may be processed and stored in countries other than your own, including countries whose data protection laws differ from those in your jurisdiction.

• ·Where we transfer personal data internationally, we use lawful transfer mechanisms such as standard contractual clauses or reliance on providers with recognized adequacy safeguards.
• ·If you are in the European Economic Area, the United Kingdom, or a jurisdiction with similar laws, you retain the rights described in Section 11 regardless of where your data is processed.
• ·By using Tribora, you acknowledge that your information may be transferred as described in this section.

We may update this Privacy Policy as the platform evolves or as legal requirements change. When we make material changes, we will notify you at least 14 days before they take effect, by in-app notification or email. The "Last updated" date at the top of this page always reflects the current version.

Continuing to use Tribora after an updated policy takes effect means you accept the update. If you do not agree, stop using the platform and delete your account before the change takes effect.

Questions about privacy, data requests, or this policy:

• ·Privacy and support: support@tribora.net
• ·Billing and payouts: billing@tribora.net

We aim to respond to all privacy inquiries within a reasonable time, and always within any deadline required by applicable law.