EchoMeshStar Privacy Policy

Effective: August 15, 2026 · Last updated: August 30, 2026

This Policy applies to the EchoMeshStar website and application services. It explains how we access, use, store, share, and delete your information, especially Google user data generated when you choose Google Sign-In.

1. Information We Collect

• Google Sign-In data: When you choose Google Sign-In, we request the openid, email, and profile scopes. We may receive your Google account identifier, name, email address, and profile image. We currently store only the identifier, name, and email address needed to create and identify your EchoMeshStar account.
• Information you provide: Registration details, nickname, profile, published content, star-network connections, broadcasts, product or store applications, and other information you submit voluntarily.
• External website compliance data: Personal website URLs, website-policy attestations, report reasons and descriptions, moderation status, domain blocks, reviewer notes, timestamps, and audit records. Reports identify the reporting account internally to prevent abuse, but the reporter's identity is not displayed publicly.
• Payment and order data: If you purchase RC, we receive the selected package, amount, currency, Stripe transaction identifiers, payment status, refund or dispute status, and related timestamps. Card details are entered on Stripe-hosted Checkout; EchoMeshStar does not receive or store your full card number or card security code.
• Affiliate attribution data: When you follow an affiliate product promotion, we create a random opaque click reference and may receive transaction identifiers, advertiser identifiers, purchase totals, network commission amounts, validation status, and limited product-level data from the affiliate network. The click reference does not contain your name, email address, username, phone number, wallet address, or database user ID. IP addresses used for affiliate risk review are stored only as shortened hashes.
• Service and device data: Login sessions, necessary cookies, local-storage data, access times, IP address, browser or device type, and logs used for security, troubleshooting, and service operations.

2. How We Use Information

We use this information only to provide or improve user-facing EchoMeshStar features, including creating and identifying accounts, signing users in, displaying profiles and star-network relationships, supporting broadcasts and discovery, processing payments, fulfilling RC purchases, handling refunds or disputes, reconciling transactions, reviewing external website safety reports, restricting unsafe links, maintaining moderation audit records, maintaining sessions, protecting security, preventing abuse, troubleshooting, and responding to user requests.

Google user data is not used for advertising, remarketing, credit assessment, data brokerage, sale of user data, or training general-purpose artificial intelligence models.

For Awin affiliate links, we ask for an affiliate consent choice. If you allow affiliate attribution, the link carries a consent signal of cons=1. If you decline or have not made a choice, the privacy-safe signal is cons=0. This choice does not prevent you from browsing products or purchasing on a merchant's website.

3. Data Storage and Security

Account and business data is stored in server-side databases controlled by EchoMeshStar. Some interface preferences and session information may be stored in your browser. We use reasonable safeguards such as HTTPS transmission, access controls, password hashing, session validation, logging, auditing, and restricted server access. No internet service can guarantee absolute security, and we continue to improve our safeguards.

4. Data Sharing and Disclosure

We do not sell your personal information or Google user data. We share or disclose information only when necessary:

• With service providers that support login, hosting, email delivery, payment processing (including Stripe), affiliate attribution and transaction reconciliation (including Awin), banking, security, or operations, limited to the data required to perform those services and subject to their applicable privacy terms;
• To comply with applicable law, court orders, or lawful government requests;
• To protect the rights, safety, and property of users, the public, EchoMeshStar, or others; or
• In other circumstances with your explicit consent.

5. Google API Data Use

EchoMeshStar's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We use basic Google identity data only to complete the Google Sign-In and account functions you request. We do not access Gmail, Google Drive, Contacts, or other Google service data for which we have not requested access.

6. Data Retention and Deletion

We retain data only as long as necessary to provide the service, maintain security, resolve disputes, reconcile payments, investigate external-link abuse, enforce repeat-violator rules, and meet legal, tax, accounting, or fraud-prevention obligations. Sessions and temporary verification codes expire according to their stated lifetimes. Website reports and moderation audit records may be retained after a link is removed when reasonably needed for safety, appeals, legal notices, or repeat-abuse prevention. Data that is no longer needed is deleted or de-identified. You may request access to, correction of, or deletion of your account and associated data. After verification, we will delete or anonymize data that can be removed. Payment records and other data required by law or needed to prevent fraud may be retained until the applicable period ends.

7. Your Choices and Rights

You may stop using Google Sign-In, revoke EchoMeshStar access in your Google Account's third-party connection settings, or request access, correction, export, or deletion. Signed-in users can obtain a machine-readable copy through the application's data export function and can submit a correction or deletion request through the privacy request workflow. Each request receives a status that can be tracked after sign-in. Revoking Google authorization does not automatically delete an existing EchoMeshStar account; please submit a separate deletion request if you want the account removed.

8. Children's Privacy

EchoMeshStar is not intended for children who are below the age at which they may independently consent to online services in their jurisdiction. If we learn that a child's personal information was collected without appropriate parental or guardian consent, we will take reasonable steps to delete it.

9. Changes to This Policy

If our data practices change, we will update this page and the “Last updated” date. We will provide notice of material changes through the application or another appropriate method.

10. Contact Us

For questions about this Policy, Google user data, or data deletion, contact support@echomeshstar.com.