FactureHub Privacy Policy

What We Collect

To make an account, we need your email and a password (we only ever store a hashed version of it, we can't see it). You also pick a username.

After that it's whatever you choose to add to your profile: a display name, bio, pronouns, gender identity, a profile picture, a banner. None of it's required.

Then there's everything you actually post: posts, comments, community notes, direct messages, group chat messages, and any images, GIFs, or video attached to them.

If you turn on two-factor authentication, the authenticator secret itself is held by Supabase (our auth provider), not by us. We never see it or store it on our end.

We also record the IP address your account was created from, once, at signup. It's there purely to catch someone spinning up a pile of accounts from the same network to dodge a ban, and we don't use it for anything beyond that.

Finally, your browser's own local storage holds a couple of small things like your theme preference and when you last passed the human-verification check. That stays on your device; it never reaches us.

What We Use It For

Running your account, showing your profile and posts to other members, delivering DMs and notifications, and enforcing our Terms of Service when a warning, suspension, or appeal comes up. The signup IP exists to catch ban evasion, nothing else. We don't run ads and we don't sell your information, so there's no tracking-for-marketing angle here.

Who Else Touches This

We don't run our own servers for everything, so a couple of outside providers handle pieces of this on our behalf. Supabase runs our authentication, database, and file storage, meaning your account, your content, and your 2FA secret (if you set one up) actually live on their infrastructure. Cloudflare runs the human-verification check you sometimes see, plus our content delivery and basic traffic protection.

Both have their own privacy policies covering how they handle data passing through their systems.

Who We Share It With

Nobody, beyond the two providers above. We don't sell your information. The only other time anything goes out is if we're legally required to hand it over, or if it's genuinely needed to look into a Terms of Service violation.

How Long We Keep It

Deactivating your account just hides your profile until you log back in; nothing's actually deleted. Asking for your account to be deleted from Settings starts a 30-day countdown, and logging back in before it's up cancels the deletion. If something of yours gets removed as part of a moderation action, we keep a copy on file with the report it came from, so an appeal can still be reviewed against what was actually there.

If You're Under 13

You need to be 13 to use FactureHub, same as our Terms of Service already say. We're not out here trying to collect data from kids, and if we find an account that belongs to someone younger, it gets shut down.

Your Rights

We aim to stay on the right side of privacy law that applies to us, including the Kentucky Consumer Data Protection Act (KCDPA), which boils down to you having the right to see, correct, or ask us to delete your personal data. Editing your profile or settings covers most of that yourself, and deleting your account from Settings handles the rest. Anything beyond that, like a full export of what we hold on you, just reach out using the contact info below.

If This Page Changes

We'll edit this page directly whenever something about FactureHub changes enough to warrant it. Sticking around and using FactureHub after that counts as accepting whatever the current version says.

Contact

Got a question about this policy, or want to make a data request? Open a support ticket in our Discord server and we'll get to it.