Privacy policy

Who is responsible

BoostYard LLC, a Delaware company, operates p2pgrowth and is responsible for its processing of account and service data. Contact hi@p2pgrowth.com for privacy questions or requests, or write to BoostYard LLC, Attn: Privacy, 16192 Coastal Highway, Lewes, DE 19958, United States.

What we collect

Account identity and email from Google or email sign-in; your display name, optional Google or uploaded avatar, headline, bio, website, broad location, expertise and social links, profile visibility, interests and notification choices; product information; requests, feedback and optional screenshots; point and payment references; reports and support correspondence.

We collect basic security and service records and count product-page visits and outbound clicks separately. Rate limiting may use short-lived hashed network identifiers. We do not store payment card numbers; Stripe processes payment details.

Public and private information

Published product information, contributor names/photos/activity, public profiles and permissioned public contributions may be public. New profiles are public by default, and members can unlist their profile page in Settings; existing saved visibility settings are preserved. Public profiles may include a headline, bio, website, location, expertise and social links you provide. Your email, point ledger, purchases and private feedback are not public discovery data. Private feedback and screenshots are accessible to their participants and authorized support. Author-approved public contribution text is visible to everyone, may be indexed and may have copies outside our control; withdrawal removes it from our public pages.

Sharing a public product URL is optional. Other websites and social platforms process visits under their own policies. Do not put confidential or personal information in a public product field.

Why we use it and who helps us

We use data to authenticate members, run the exchange, settle points, provide billing, review abuse, send service notices, and maintain the service. Depending on the activity and applicable law, the basis is contract performance, legitimate operational/security interests, consent for optional communications, or legal obligations.

Google Cloud/Firebase provides hosting, identity, storage and database services. Stripe provides payments and billing. Resend delivers email. Service providers process data needed for those functions, potentially in the United States and other locations subject to their applicable safeguards. We do not sell your personal information.

Storage and retention

Account and product records remain while needed to provide the account. Private feedback remains for the participants’ history until account deletion or an applicable removal request. Security rate-limit records have short retention and are automatically expired.

When an account is deleted, we remove its public profile/products and delete its uploaded evidence, subject to resolving funded work. Some transaction references and records may remain where necessary for accounting, fraud prevention, disputes or legal obligations. Backup copies age out through the configured backup cycle.

To prevent repeated welcome bonuses, we retain restricted-access hashes of the account identifier and normalized verified email, together with the grant date, for the duration of the welcome offer, including after account deletion. These hashes are used to recognize prior claims, not for marketing.

Your choices and rights

Edit your profile/preferences, turn the optional weekly digest off, export your data, or request account deletion from Settings. Operational messages needed for an active request, security or billing are distinct from optional marketing.

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent or complain to a regulator. Contact hi@p2pgrowth.com; we may verify identity before fulfilling a request.

Browser storage and security

We use necessary authentication storage and save an unfinished contribution draft on your device so it is not lost. With your permission, Google Analytics uses cookies to measure page visits, clicks, scrolling, form activity and app action outcomes so we can improve the service. We do not send form contents, email addresses, private feedback or sign-in tokens to Analytics. Advertising features are disabled. Analytics is optional: decline it or change your choice using Cookie settings at the bottom of any page.

We apply access controls and other reasonable safeguards, but no service guarantees absolute security. Notify us if you believe your account or private evidence is exposed. We will update this notice as the service evolves and provide notice where required.