This notice explains how personal data is handled on Crowned. The controller is Central Standardised Services Ltd., a private limited company registered in the Republic of Cyprus ("Crowned", "we", "us"). Contact for privacy matters: legal@crowned.net.
1. What we collect
Creators. When you create a creator account, sign-in is provided by our authentication provider, Clerk, which holds your email address, credentials, and session data. We hold your username, display name, bio, country, and the images you upload. When you connect a payment account, we receive from our payment provider, Stripe, your connected account identifier and payout status. Your identity documents and banking details are collected and held by Stripe, not by us. We also hold records of the payments, subscriptions, and invoices relating to your items.
Payers. You do not create an account to pay on Crowned. Your card details, name, and billing information are collected and processed by Stripe, not by us. We hold payment records containing payment-provider identifiers and transaction details, and we do not store your name, postal address, or card data. The email address you provide at checkout is processed by Stripe to send receipts and payment notices. Your subscription page is reached through a private link shown to you after payment and on your receipts and invoices.
Everyone. We keep technical logs of access to the platform for security and operations. Logs carry identifiers only, never card data or the content of what you submit.
2. Why we process personal data, and on what legal basis
- To provide Crowned, process payments, run subscriptions, and settle amounts with creators: performance of a contract.
- To secure the platform, prevent fraud and abuse, moderate content, and enforce our terms: our legitimate interests in operating a safe and lawful service.
- To count how many different people open each creator page, or follow one of its links, per day, and to understand how Crowned is used: our legitimate interests in running and improving the service. For the count we compute a code from the visitor's network address and browser type with a random daily value, and a second code from the network address and the daily value alone, used only to limit how many visitors one address can count towards in a day. Neither identifies anyone, neither sets a cookie, and both are deleted within two days.
- To keep accounting and transaction records and respond to lawful requests from authorities: compliance with legal obligations.
We do not sell personal data, and we do not use personal data for third-party advertising.
3. Who receives personal data
Personal data is shared with the service providers we use to run Crowned: Stripe (payment processing, creator onboarding and verification, receipts, payouts), Clerk (creator sign-in), and Amazon Web Services (hosting, storage, and logs). Each acts under its own terms and applicable data protection agreements. We may also share data with professional advisors, and with courts, regulators, or law enforcement where required by applicable law.
4. International transfers
Our infrastructure is hosted in the United States, and our service providers may process data there and elsewhere. Where personal data is transferred outside the EEA or UK, we rely on safeguards recognised under applicable law, including adequacy decisions and standard contractual clauses, as applicable to each provider.
5. How long we keep data
We keep personal data only as long as needed for the purposes above. In particular:
- payment and transaction records are kept as required for accounting, audit, and payment-provider reconciliation under applicable law;
- application and access logs are kept for limited periods, currently no longer than 12 months, and then deleted;
- when a creator deletes their account, their page and sign-in close at once, and their profile details and images are removed from the service and its caches immediately and from encrypted backups within 35 days. Their username is never reused. Running subscriptions end at the close of the paid period. Payment records are retained as required by applicable law, with no personal details attached to them.
6. Crowned Safe Gifting
Crowned Safe Gifting lets a creator publish a certificate at safegifting.crowned.net. It is optional, and nothing below applies to anyone who does not take it.
What the certificate holds. Your username, the picture you upload for it, your scores in four areas, your three written answers, the date your face was verified and the date you completed the test. Once complete, the certificate is public at its address, is listed in Certified Creators, and is linked from your Crowned page. It cannot be edited or retaken.
What we also keep, and do not publish. The time you confirmed you are 18 or over; your rating of each statement and the time you took over it; a consistency figure computed from your ratings, which is not shown; which version of the commitments you ticked, and when; the result of each picture check and face scan, with its time; and your code.
The face check. Your picture is checked by our image moderation and for exactly one face. The live scan runs in your browser through Amazon Rekognition Face Liveness, a service of Amazon Web Services: it confirms that a live person is in front of the camera, and the face it captures is then compared with your picture. We keep the result only: pass or fail, the two scores (how sure the check is that you were live, and how closely your face matched the picture), the time, and the scan's reference number. We keep nothing of the scan itself: no video, no frames and no image from it. We do not ask Amazon to store any image from the scan, and the image the comparison uses is held only in memory for that comparison.
Your code. The code shown to you when you complete the test is yours alone. Only you can see it, on your own certificate when you are signed in. We do not share it with anyone today; it exists so that partners can later confirm a certificate is yours.
Deletion. Your certificate, its picture, your answers, your scores and your code are deleted with your Crowned account, in the same way and on the same timescale as the rest of your profile (section 5). The certificate's address then says that it is no longer active.
7. Security
Data is encrypted in transit and at rest. Access is restricted to what is needed to operate the service. Payment provider notifications are reduced to the fields the platform acts on before storage, and payment method details are not stored by us. If a personal data breach occurs, we will assess and notify authorities and affected people in accordance with applicable law.
8. Your rights
Depending on where you live, you have rights over your personal data, including the right to access, correct, delete, and receive a copy of it, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise your rights, contact legal@crowned.net. We may need to verify your identity before responding, and we respond within the timeframes required by applicable law.
If you are in the EU or EEA, you may lodge a complaint with your local supervisory authority or with the Office of the Commissioner for Personal Data Protection of Cyprus. If you are in the UK, you may complain to the Information Commissioner's Office.
United States. Residents of states with applicable privacy laws may exercise the rights those laws provide, including access, deletion, and correction. We do not sell or share personal information as those terms are defined under such laws, and we do not process personal information for targeted advertising.
9. Children
Crowned is not directed at anyone under 18, and we do not knowingly collect personal data from anyone under 18, including children under 13. If we become aware that a minor's data has been collected, we will delete it and close any related account.
10. Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects about you without human involvement. Technology may assist content moderation and fraud prevention, with human review of significant decisions.
11. Changes
We may update this notice from time to time. The current version is always available on Crowned, and material changes will be notified by reasonable means.