Privacy Policy
This Privacy Policy explains how Byzhop collects, uses, stores, and shares data when creators use the platform to publish public storefronts, manage products, and process subscription payments.
1. Information We Collect
We collect the data needed to operate accounts, storefront pages, uploads, and subscription access.
- Account data such as name, email address, username, and login method.
- Storefront content such as page title, bio, avatar, social links, product details, and affiliate URLs.
- Uploaded assets such as product images and profile images.
- Session, device, and request data used for authentication, security, and abuse prevention.
- Billing records such as transaction IDs, payment status, amount, and subscription history.
- Operational and admin records such as audit logs, support notes, and subscription override history.
2. How We Use Information
- To create and secure user accounts.
- To render public storefront pages and product detail pages.
- To store and serve uploaded media.
- To enforce plan limits, protect the service, and investigate abuse.
- To process upgrades, maintain subscription state, and reconcile payment events.
- To provide support, resolve billing issues, and maintain operational logs.
3. What Becomes Public
Storefront content is public by design. If you publish a public page, other people may be able to view your display name, avatar, bio, social links, product catalog, affiliate disclosure text, and product images.
Account email addresses, password hashes, admin notes, session records, and internal billing logs are not intended to be public.
4. Third-Party Services
Byzhop currently depends on infrastructure and payment providers to operate the service.
- Cloudflare is used for application hosting, database, object storage, caching, and edge delivery.
- Midtrans is used for payment checkout and payment status notifications when paid upgrades are enabled.
- Google OAuth may be used as an optional sign-in method if the operator enables it.
We do not store third-party marketplace credentials in the MVP. Affiliate destinations are stored as links, not as marketplace account passwords or API secrets.
5. Cookies, Sessions, and Security
We use authentication cookies and session storage to keep users signed in, protect dashboard access, and help detect suspicious activity. We also keep internal logs that may include request metadata needed for security and reliability.
6. Retention and Deletion
We retain account and billing data for as long as needed to operate the service, resolve disputes, investigate abuse, and maintain financial and operational records. Public storefront content may remain available until the account owner removes it or the operator deletes the account.
When supported operationally, the operator may delete or anonymize data after account closure, subject to security, billing, fraud-prevention, and legal recordkeeping needs.
7. User Choices
- Users can edit or remove storefront content from the dashboard.
- Users can remove uploaded assets through supported product and page management flows.
- Users may request account closure or data review through the support channel published by the operator.
8. Children and Restricted Use
Byzhop is intended for adult creators and operators. Do not use the platform if you are not permitted to enter into a digital service agreement in your jurisdiction.
9. Policy Updates
The operator may update this Privacy Policy as the platform adds new providers, analytics, support tooling, billing flows, or legal requirements. The date at the top of this page will be updated when material changes are published.