Privacy Policy for SettleQuik

Introduction

SettleQuik LLC ("SettleQuik," "we," "us," or "our"), a limited liability company organized under the laws of the State of Oklahoma, with its principal place of business at 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159, operates the Settle Quik website (the "Site") at settlequik.com and provides the SettleQuik services (the "Services"). This Privacy Policy ("Policy") describes how we collect, use, share, and protect personal information when you access or use our Site and Services.

By using the Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Services. This Policy applies to all users ("Users," "you," or "your"), including those on our Free Plan, Pro Plan, Business Plan, and Agency Plan. This Policy also applies to Agency Accounts and to creator profiles managed under an Agency Account. Where an agency administers multiple creator profiles, the agency is responsible for ensuring it has the appropriate authority to provide or manage any information associated with those profiles. We are committed to protecting your privacy and complying with applicable laws, including but not limited to the General Data Protection Regulation ("GDPR") for users in the European Union, the California Consumer Privacy Act ("CCPA") for California residents, and other state and federal privacy laws.

Important Note: SettleQuik does not process payments, store payment credentials, or handle financial transactions. We do not collect sensitive financial information such as credit card details or bank account numbers. All payment links direct users to third-party processors (e.g., PayPal); for subscription billing, Dodo Payments acts as our Merchant of Record and handles all related personal data directly. Those platforms manage their own data practices.

This Policy incorporates our Terms and Conditions, available at [settlequik.com/terms], which govern your use of the Services. For questions about this Policy, contact us at [email protected] or [email protected].

Information We Collect

We collect limited personal information necessary to provide the Services. Our collection practices are transparent and minimal.

2.1 Information You Provide Directly

When you create an Account or use the Services, you may provide:

• Account Information: Name, email address, and password (hashed for security).
• User Content: Payment links (e.g., URLs to PayPal, Venmo, Paxum Email, Cosmo Payment ID, Throne Wishlist URL), customization preferences (e.g., themes, colors, bio), and branding elements for your landing page, including custom thank-you messages.
• Billing Information (Pro Plan, Business Plan, and Agency Plan Only): Payment method details for subscriptions, processed exclusively by our third-party provider, Dodo Payments. We do not store full payment credentials; Dodo Payments handles this in compliance with PCI-DSS standards as our Merchant of Record.
• Agency / Roster Information: agency name, agency contact details, roster assignments, delegated user access settings, creator profile relationships, and related administrative preferences.

2.2 Information Collected Automatically

We may automatically collect non-personal information to improve the Services:

• Usage Data: IP address, browser type, device information, and access times.
• Analytics Data (Pro Plan, Business Plan, and Agency Plan Only): Page views, link clicks, referral sources, and aggregated performance metrics for your landing page(s). This data is anonymized where possible and not linked to individual identities without consent.
• Cookies and Tracking Technologies: We use essential cookies for functionality (e.g., session management) and analytics cookies (e.g., for Pro Plan, Business Plan, and Agency Plan tracking). You can manage cookie preferences via your browser settings.
• Agency Analytics Data: roster-level analytics, creator-level analytics, and administrative activity related to Agency Accounts, such as access events, profile changes, and permission updates.

2.3 Information from Third Parties

• We receive limited billing confirmations from Dodo Payments for Pro, Business, and Agency Plan subscriptions.
• No data is collected from third-party payment processors you link (e.g., PayPal, Zelle, Venmo, Cash App); those platforms manage their own privacy practices.

We do not collect sensitive personal information (e.g., racial or ethnic origin, health data, or biometric data) unless inadvertently provided in a bio, in which case you are responsible for compliance.

How We Use Your Information

We use collected information solely to operate, improve, and secure the Services:

• Provide and Maintain Services: To create and host your landing page(s), process Pro, Business, and Agency Plan subscriptions via Dodo Payments, and deliver analytics.
• Communicate with You: For support, updates, or marketing (with opt-out options), including support responses within the times set out in our Service Level Agreement.
• Improve User Experience: Analyze usage patterns to refine features (e.g., customization options, multiple payment pages for Business Plan and Agency Plan).
• Security and Fraud Prevention: Detect unauthorized access or abuse.
• Legal Compliance: Respond to legal requests or enforce our Terms.
• To operate Agency Account features, including roster management, delegated access, creator analytics, and administrative settings.
• To maintain audit logs and security records for agency-managed accounts and delegated users.

We do not use your information for automated decision-making that produces legal effects or similarly significant impacts.

SettleQuik never uses your billing data for its own marketing; that data is used only to operate and secure subscription billing via Dodo Payments.

Sharing Your Information

We do not sell, rent, or share your personal information for marketing purposes. Sharing is limited:

4.1 With Service Providers

• Dodo Payments: For Pro, Business, and Agency Plan billing only, acting as our Merchant of Record; they are contractually bound by data protection terms. For information on how Dodo Payments processes your personal data, please refer to their Privacy Policy at dodopayments.com/privacy-policy.
• MongoDB Atlas: Our database provider. Account information, landing page content, invoices, agency roster records and support history are stored there.
• Cloudinary: Image hosting. Profile photos, agency client avatars, invoice logos and any image you or your customers upload, including payment proof screenshots, are stored and served by Cloudinary.
• SendGrid: Transactional email delivery, and newsletter contacts where you have subscribed. Email addresses we send to are processed by SendGrid.
• Google Analytics: Site usage measurement. Google receives your IP address, device and browser information, and the pages you visit, and sets cookies in your browser. This runs on the Site for all visitors and is not limited to any plan. We do not send Google your name, email address, username or account identifiers.
• TinyTalk: The in-page support chat shown on our home page and in the console. Messages you send in that chat are processed by TinyTalk.
• Browser push services: If you enable push notifications, your browser vendor's push service (for example Google, Mozilla or Apple, depending on your browser) delivers those notifications to your device.
• Hosting Provider: Our servers run on a third-party hosting provider in the United States; access is limited to necessary technical support.

4.2 For Legal Reasons

We may disclose information if required by law, to protect our rights, or in response to subpoenas, court orders, or government requests. We will notify you of such disclosures unless prohibited.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as a business asset, subject to equivalent privacy protections.

4.4 With Your Consent

We may share additional information if you explicitly agree (e.g., via integrations in future updates). No data is shared with third-party payment processors you link; we only store and display public URLs.

4.5 Agency-Directed Disclosures

If an Agency Account manages creator profiles, the agency controls the internal sharing of information among its authorized users. We may make agency data available to Agency Admins and delegated users based on the permissions established within the account.

Data Security

We prioritize your data's security with industry-standard measures:

• Encryption: SSL/TLS for all data in transit; password hashing for storage.
• Access Controls: Limited employee access, role-based permissions, and regular audits.
• Backups and Retention: Secure backups; data retained only as long as necessary (e.g., Account info while active; analytics deleted along with the Account).
• Incident Response: In case of a breach, we will notify affected users and authorities within required timelines (e.g., 72 hours under GDPR).

Despite these efforts, no online service is 100% secure. You are responsible for safeguarding your login credentials.

5.1 Data Retention

We retain personal information only for as long as needed to provide the Services, meet legal obligations, or resolve disputes. Account information is kept while your Account remains active.

Deletion is immediate and permanent: when an Account is deleted, the Account record, its saved payment methods and its landing pages are removed from our live systems at once, and the deletion cannot be reversed. Analytics data and performance metrics are kept while your Account remains active and are deleted immediately when the Account is deleted. Support and communication records are deleted immediately when the Account is deleted.

Separately from Account deletion, a support conversation that our team clears from the support console is hidden from that console rather than erased, because it is a record of correspondence with you that we may need afterwards. It is removed in full when the Account is deleted.

A limited set of records is kept after an Account is deleted. Each is reduced to what its purpose requires:

• Billing records: kept for seven years to comply with applicable accounting and audit requirements. Fields identifying you, your clients and the work invoiced are removed, and the private link that gave a client access to an invoice is disabled, leaving the financial summary.
• Enforcement records: where an Account was suspended, reinstated or terminated, we keep a record of that action for three years from the date of deletion, so that we can operate and defend our Acceptable Use Policy. Our internal administrative notes are removed. These records identify the Account concerned, which is what makes them enforcement records. Other administrative and content-moderation entries are deleted with the Account.
• Executed agency agreements: where you signed our Agency Master Services Agreement, the executed agreement is kept for seven years from the date of deletion, because obligations under it can outlive the Account. The IP address and browser details recorded when it was signed are redacted.

When retention periods expire, information is securely deleted or anonymized in accordance with industry standards.

Your Privacy Rights and Choices

Depending on your location, you may have rights under applicable laws. To exercise them, contact [email protected] with verification.

6.1 General Rights

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate information.
• Deletion: Request removal (subject to legal retention obligations; e.g., billing records for 7 years).
• Objection/Restriction: Object to or restrict processing (e.g., for marketing).
• Portability: Receive your data in a structured format (where applicable).

6.2 CCPA-Specific Rights (California Residents)

• Right to know categories of information collected, sold, or disclosed in the past 12 months.
• Right to opt-out of sales (we do not sell data, but you can submit opt-out requests).
• Right to non-discrimination for exercising rights.

6.3 GDPR-Specific Rights (EU/EEA Users)

• Rights as listed above, plus the right to data portability and to lodge complaints with supervisory authorities (e.g., via edpb.europa.eu).
• For EU users, our legal basis for processing is contract performance (for Services), consent (for marketing), or legitimate interests (for security/analytics).

We respond to verified requests within 45 days (extendable under law). No fee unless requests are excessive.

6.4 Cookies and Tracking

Manage cookies via browser settings. The landing page analytics described in Section 2.2 are a paid plan feature and end when you downgrade to the Free Plan. Cookies set on the Site itself apply regardless of your plan and are managed through your browser settings or by contacting support.

Data Controller and Data Processor Roles

SettleQuik acts as the data controller for personal information that relates to your Account, communications, and general use of the Services. For User Content that you choose to publish or upload to your landing page, SettleQuik acts as a data processor and processes that information solely to provide and maintain the Services. For business users that require additional data protection terms, SettleQuik can make available a Data Processing Addendum upon request. All processing activities are limited to the instructions necessary to operate the Services and comply with applicable law.

For Agency Accounts, the agency may act as the controller for creator information it submits or manages through the Services, and SettleQuik acts as a processor only to the extent it processes that information to provide the Services. The agency is responsible for confirming it has the lawful authority to submit creator data and assign access to delegated users.

International Data Transfers

Our servers are located in the United States. For international users (e.g., Phase 2: Canada, UK, Australia; Phase 3: EU), we ensure adequate safeguards:

• EU/UK Transfers: Standard Contractual Clauses (SCCs) with U.S.-based providers like Dodo Payments.
• Other Countries: Compliance with local adequacy decisions or equivalent mechanisms.

We do not transfer data to countries without sufficient protections.

Children's Privacy

The Services are not intended for children under 13 (U.S.) or 16 (EU, depending on jurisdiction). We do not knowingly collect data from children. If we learn of such collection, we will delete it promptly. Parents/guardians should contact us at [email protected].

Changes to This Policy

We may update this Policy to reflect changes in our practices or laws. We will post revisions on the Site and notify you via email or in-Account notice for material changes (at least 30 days in advance). Continued use after updates constitutes acceptance.

Contact Us

For privacy inquiries, data subject requests, or concerns:

• Email: [email protected]
• Support: [email protected]
• Postal: SettleQuik LLC, Attn: Privacy Officer, 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159
• Phone: 572-241-5592

For EU users, our Data Protection Officer can be reached at the above email.