Privacy policy

Who is responsible

BoostYard LLC, a Delaware company, operates p2pgrowth and is responsible for its processing of account and service data. Contact hi@p2pgrowth.com for privacy questions or requests, or write to BoostYard LLC, Attn: Privacy, 16192 Coastal Highway, Lewes, DE 19958, United States.

What we collect

Account identity and email from Google or email sign-in; your display name, optional interests and notification choices; product information; requests, feedback and optional screenshots; point and payment references; reports and support correspondence.

We collect basic security and service records and count product-page visits and outbound clicks separately. Rate limiting may use short-lived hashed network identifiers. We do not store payment card numbers; Stripe processes payment details.

Public and private information

Published product information and contributor display names/activity may be public. Your email, point ledger, purchases and private feedback are not public discovery data. Feedback and screenshots are accessible to their participants and authorized support.

Sharing a public product URL is optional. Other websites and social platforms process visits under their own policies. Do not put confidential or personal information in a public product field.

Why we use it and who helps us

We use data to authenticate members, run the exchange, settle points, provide billing, review abuse, send service notices, and maintain the service. Depending on the activity and applicable law, the basis is contract performance, legitimate operational/security interests, consent for optional communications, or legal obligations.

Google Cloud/Firebase provides hosting, identity, storage and database services. Stripe provides payments and billing. Resend delivers email. Service providers process data needed for those functions, potentially in the United States and other locations subject to their applicable safeguards. We do not sell your personal information.

Storage and retention

Account and product records remain while needed to provide the account. Private feedback remains for the participants’ history until account deletion or an applicable removal request. Security rate-limit records have short retention and are automatically expired.

When an account is deleted, we remove its public profile/products and delete its uploaded evidence, subject to resolving funded work. Some transaction references and records may remain where necessary for accounting, fraud prevention, disputes or legal obligations. Backup copies age out through the configured backup cycle.

Your choices and rights

Edit your profile/preferences, turn the optional weekly digest off, export your data, or request account deletion from Settings. Operational messages needed for an active request, security or billing are distinct from optional marketing.

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent or complain to a regulator. Contact hi@p2pgrowth.com; we may verify identity before fulfilling a request.

Browser storage and security

We use necessary authentication storage and save an unfinished contribution draft on your device so it is not lost. Optional analytics or advertising cookies are not required for participation.

We apply access controls and other reasonable safeguards, but no service guarantees absolute security. Notify us if you believe your account or private evidence is exposed. We will update this notice as the service evolves and provide notice where required.