Privacy Policy

Effective Date: March 1, 2026 Last Updated: March 1, 2026 Legal Entity: Team W LLC, a Nevada limited liability company, doing business as uFire Contact: privacy@ufire.ai 1. Introduction This Privacy Policy explains how Team W LLC, doing business as uFire ("uFire," "we," "us," "our"), collects, uses, discloses, and protects your personal information when you use our platform at ufire.ai and our mobile applications ("Platform"). By using the Platform, you agree to the collection and use of information as described in this Policy. This Platform is intended for users 18+ by default. Users ages 13–17 may apply with parent or legal guardian consent. We do not knowingly allow children under 13 to use the Platform or submit an application (COPPA). If we become aware that we collected personal information from a child under 13, we will delete it promptly. 2. Information We Collect 2.1 Information You Provide Directly Account information: - Full name - Email address - Phone number - Profile photo (optional) - City or metro area Ambassador information: - Social media handles (Instagram, TikTok, X/Twitter, YouTube, etc.) - Approximate follower counts - Content niche / categories - IRS Form W-9 information (name, address, taxpayer identification number) — collected once cumulative earnings reach $500, stored securely Brand information: - Business name and contact information - Campaign briefs and content - Payment method (processed by Stripe — we do not store card numbers) Application information: - Responses provided during the ambassador application - Any documents you upload 2.2 Information Collected Automatically When you use the Platform, we automatically collect: - IP address - Browser type and version - Device type and operating system - Pages visited and time spent - Referring URL - Click and interaction data We use cookies and similar tracking technologies. See Section 6 (Cookies) for details. 2.3 Information from Third Parties Clerk (authentication): We use Clerk to manage account creation and sign-in. Clerk may collect authentication-related data. See Clerk's privacy policy at clerk.com/privacy. Stripe: When you connect a payout account or pay for a campaign, Stripe collects your payment information. Stripe may share limited identity verification data with us (such as account verification status). See Stripe's privacy policy at stripe.com/privacy. Google Analytics 4: We use GA4 to understand how users interact with our Platform. This may include anonymized usage data. See Google's privacy policy at policies.google.com/privacy. Social Media Platforms: We collect publicly available data about your social media profiles (such as follower counts and post engagement) to facilitate campaign matching. We do not collect private social media messages or login credentials. 3. How We Use Your Information We use the information we collect to: - Provide the Platform: Process applications, match Ambassadors with campaigns, facilitate posts, verify submissions - Process payments: Send ambassador payouts via Stripe, collect brand campaign payments, comply with tax reporting (including issuing 1099-NEC forms) - Communicate with you: Send account notifications, campaign updates, payout confirmations, and platform updates - Verify identity and prevent fraud: Confirm social media accounts, detect artificial engagement, protect against platform abuse - Comply with legal obligations: Tax reporting, responding to legal requests, maintaining records as required by law - Improve the Platform: Analyze usage patterns, fix bugs, develop new features - Marketing (with your consent): Send promotional communications about new features and campaigns. You can opt out at any time. 4. How We Share Your Information We do not sell your personal information. We may share your information with: Service providers: Third-party vendors who help us operate the Platform, including Stripe (payments), Clerk (authentication), Vercel (hosting), Supabase (database), and Resend (email). These providers are contractually required to protect your data and use it only for the services they provide to us. Brands: When you are matched with a campaign, the Brand may see your social media handles, approximate follower count, and campaign-relevant profile information. Brands do not receive your full personal details, payment information, or tax information. Ambassadors: Brands' business names and campaign information are visible to matched Ambassadors. Law enforcement / legal process: We may disclose your information if required by law, court order, or to protect the rights, safety, or property of uFire or others. Business transfers: If uFire is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy. 5. Your Privacy Rights California Residents (CCPA/CPRA) If you are a California resident, you have the following rights: - Right to Know: You may request a list of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties we share it with. - Right to Delete: You may request deletion of your personal information, subject to certain exceptions. - Right to Correct: You may request correction of inaccurate personal information. - Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do use analytics services that may constitute "sharing" under CPRA. You may opt out of this by contacting us or using our cookie preference tools. - Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. To exercise these rights, contact us at privacy@ufire.ai or by mail at our address below. We will respond within 45 days. Nevada Residents (SB220) Nevada residents may opt out of the sale of personal information by contacting us at privacy@ufire.ai. We do not sell personal information. All Users - Access and correction: You may access and update much of your account information directly in your account settings. - Account deletion: You may request account deletion by contacting privacy@ufire.ai. We will delete your account within 30 days, subject to our obligation to retain certain records for legal and tax purposes (generally 7 years). - Marketing opt-out: You may unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us. 6. Cookies and Tracking We use cookies and similar tracking technologies on our Platform. Types of cookies we use: - Essential: Required for the Platform to function (Authentication / session management) - Analytics: Understand how users use the Platform (Google Analytics 4, Vercel Analytics) - Preferences: Remember your settings (Theme, language preferences) Your choices: - Browser settings: Most browsers allow you to refuse or delete cookies. Doing so may impact Platform functionality. - Google Analytics opt-out: You can opt out using the Google Analytics opt-out browser add-on. - Do Not Track: We honor Do Not Track signals where technically feasible. 7. Data Retention We retain your personal information for as long as necessary to provide the Platform and comply with our legal obligations: - Account data: Retained for the duration of your account plus 3 years after account closure - Tax records (W-9, 1099 data): Retained for 7 years as required by IRS regulations - Transaction records: Retained for 7 years - Application data (declined applicants): Deleted after 1 year - Analytics data: Retained per Google's standard GA4 retention settings (up to 14 months) 8. Data Security We use industry-standard security measures to protect your information, including: - Encryption in transit (TLS/HTTPS) - Encrypted database storage (Supabase) - Access controls limiting who can access personal data - Authentication security via Clerk No security system is perfect. In the event of a data breach that is likely to result in harm to you, we will notify you and relevant authorities as required by applicable law. 9. Third-Party Links The Platform may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately. 10. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Platform at least 14 days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance. 11. Contact Us For privacy questions, requests, or concerns: Team W LLC (dba uFire) Email: privacy@ufire.ai DMCA: dmca@ufire.ai General: legal@ufire.ai Las Vegas, Nevada We aim to respond to all privacy inquiries within 10 business days. This Privacy Policy was last updated March 1, 2026.