Privacy policy

Who is responsible

BothStories (“BothStories”) is responsible for the personal data described here. Contact: contact@bothstories.com.

What we collect

• When you buy: checkout runs on Whop, which shares with us your name, email address and order details. Whop processes your payment; we never receive your full card details.
• If you answer our optional question after purchase: your answer and the product it relates to. Please don't include names or confidential details about other people in it.
• If you email us: your message and email address.
• Analytics and advertising: we use the Whop Pixel, the Meta Pixel, Meta's Conversions API (which receives purchase and checkout events from our server, with your email address hashed), our own anonymous page-view counting (a random visitor ID in a first-party cookie, and which ad you arrived from) to understand how visitors use the site and to measure our advertising. These tools may set cookies or collect device and usage data.

How we use it

• To deliver your product and updates to the edition you bought.
• To handle support, cancellations and refunds.
• To improve our products, using research answers you choose to share.
• To keep records we're legally required to keep, such as for tax.

Who we share it with

Only the services we need to run the business: Whop for payments, our website host, our email provider, Formspree for optional research answers, and the Whop Pixel, the Meta Pixel, Meta's Conversions API (which receives purchase and checkout events from our server, with your email address hashed), our own anonymous page-view counting (a random visitor ID in a first-party cookie, and which ad you arrived from). We don't sell your personal data.

How long we keep it

Order and customer details are kept as long as we need them to deliver and support your purchase and to meet legal and tax obligations. Research answers are kept until they're no longer useful for improving the product, or until you ask us to delete them.

Records of visits to our product pages (an anonymous visitor ID, the page, and which ad you arrived from) are deleted automatically after 13 months. The cookie that remembers which ad you arrived from expires after 30 days, and the anonymous visitor ID cookie after a year.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how it's used. Email us to make a request. You can also complain to your local data protection authority.

Changes

We'll update this page if what we collect changes. See also our Terms and Refund policy.