— LEGAL

Privacy Policy

EFFECTIVE SEPTEMBER 20, 2026

1. 01What we collect

   Account details. Your email address and a password. The password is stored only as a hash by our authentication provider; we cannot read it.

   Profile details you choose to add. First and last name, state and city, a one-line description, a bio, what you are building, social links, a profile photo, and whether you are open to working with others. Everything on your profile is optional except your name and location.

   Verified and payment status. Whether you are Verified and until when, your Stripe customer id, and the events Stripe sends us about your subscription. Card numbers and bank details go directly to Stripe and never touch our servers.

   Activity on the Service. Connection requests you send and receive, and standard server logs (IP address, browser type, pages requested, timestamps) kept for security and debugging.

2. 02How we use it

   To run the Service: show your profile to other members, place you on the map, deliver connection requests, bill and manage the Verified subscription, and answer support email.

   To keep the Service safe: detect abuse, spam, and fraud, and enforce our Terms.

   To tell you about your account: receipts, failed-payment notices, changes to these policies, and security alerts. We do not send marketing email unless you ask for it, and we never sell your data or share it with advertisers.

3. 03Who can see your profile

   Anyone visiting the site sees only aggregate counts and dots on a map: how many members are in each state and city. No names.

   Signed-in members see the member list: your first name and last initial, city, one-line description, photo, linked social networks, and whether you are Verified.

   Any signed-in member can open your full profile, including bio, what you are building, and your social links, and can send you a connection request.

   Every account appears in the list. Cancelling Verified removes the badge at the end of your paid period; your account and profile stay until you ask us to delete them.

4. 04Services we rely on

   We use a small number of providers to run ASTRIX CONNECT. Each one only receives what it needs for its job and is contractually bound to protect it:

   Supabase (database, authentication, and photo storage; servers in the United States). Stripe (payments and subscription billing; Stripe’s own privacy policy applies to the payment details you enter at checkout). Vercel (web hosting and server logs).

   We may also disclose information if required by law, to protect the rights or safety of members or the public, or as part of a sale or merger of the business, in which case this policy continues to apply to it.

5. 05Cookies

   We use cookies only to keep you signed in. There are no advertising cookies and no cross-site tracking. We count page views with Vercel Web Analytics, which is cookieless and does not identify you; it records the page, referrer, country, and device type, and nothing about who you are. Stripe sets its own cookies on its checkout and billing pages for fraud prevention.

6. 06How long we keep it

   Your account and profile stay until you delete them. Payment records are kept for as long as tax and accounting rules require (generally seven years). Server logs are kept for a short period, typically under 90 days. Backups may hold copies of deleted data for up to 30 days after deletion.

7. 07Your choices and rights

   You can view and edit everything on your profile from your Account page at any time, and change or remove your photo and links. You can cancel Verified from Manage Billing.

   To get a copy of your data, correct something you cannot edit yourself, or delete your account entirely, email support@tidalwebs.com from your account address. We respond within 30 days. Residents of California, the European Economic Area, the United Kingdom, and other places with privacy laws have additional rights (access, portability, correction, deletion, objection, and the right not to be discriminated against for exercising them); the same email is the way to use them.

8. 08Security

   All traffic to the Service is encrypted in transit. Data is stored with providers that encrypt it at rest. Access to member data inside Tidal is limited to what is needed to run and support the Service. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as required by law.

9. 09Children

   The Service is for adults running or starting a business. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email us and we will remove it.

10. 10Changes to this policy

    If we change this policy in a way that matters, we will email the address on your account before the change takes effect. The date at the top of this page is always the version in force.

11. 11Contact

    Tidal Systems LLC, operator of ASTRIX CONNECT. support@tidalwebs.com