Privacy Policy

Built by Nature LLC ("Built by Nature," "we," "us," or "our") operates the Built by Nature platform, a natural beauty contest platform accessible at builtbynature.com (the "Platform"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our Platform, create an account, participate in contests, purchase voting tokens, or interact with our services in any way.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

We use the information we collect to:

• Create and manage your account — authenticate your identity, maintain your profile, and verify age eligibility
• Process payments and transactions — facilitate token purchases, track earnings, and process contestant and recruiter payouts via CCBill
• Manage contests — administer contest entries, tabulate votes, determine winners, and advance contestants through competition rounds
• Track earnings — calculate and report contestant and recruiter revenue shares
• Communicate with you — send account notifications, contest updates, promotional emails (with your consent), and respond to support requests
• Prevent fraud and abuse — detect and prevent vote manipulation, bot activity, fake accounts, and other forms of cheating or misuse
• Improve our services — analyze usage patterns, conduct analytics, and enhance Platform functionality and user experience
• Comply with legal obligations — fulfill regulatory requirements, enforce our Terms of Service, and respond to legal processes

We never sell your personal data. We may share your information only in the following circumstances:

• CCBill (Payment Processing) — We share necessary information with CCBill to process payments, manage subscriptions, and handle payouts. CCBill operates as an independent data controller for payment data.
• Supabase (Data Storage) — Your account data and content are stored on Supabase infrastructure, which provides our database and file storage services with built-in security features including Row Level Security (RLS) policies.
• Vercel (Hosting) — Our Platform is hosted on Vercel, which processes requests and may have access to IP addresses and usage data in the course of serving our application.
• Law Enforcement and Legal Requirements — We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers — In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

All financial transactions on the Platform — including token purchases, contestant payouts, and recruiter commissions — are processed by CCBill, a PCI DSS-compliant third-party payment processor. When you make a purchase, you are providing your payment information directly to CCBill.

CCBill's collection and use of your payment information is governed by their own privacy policy, available on their website. We encourage you to review CCBill's privacy policy to understand their data practices.

On our end, we retain only:

• Transaction IDs provided by CCBill
• Transaction amounts and timestamps
• Token purchase and vote allocation records for contest integrity
• Earnings and payout records for contestant and recruiter accounts

We use the following types of cookies:

• Essential / Strictly Necessary Cookies — Required for authentication, session management, security, and core Platform functionality. These cannot be disabled.
• Analytics Cookies — Help us understand how visitors interact with the Platform so we can improve the user experience. These are only set with your consent where required by law.
• Preference Cookies — Remember your settings such as display preferences and language selections.

For comprehensive information about the cookies we use and how to manage or opt out of non-essential cookies, please visit our Cookie Policy.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data is retained for as long as your account is active.
• Transaction and earnings records are retained for a minimum of seven (7) years for tax and legal compliance purposes.
• Uploaded content (photos, videos) is retained until you delete it or request its removal, or until your account is closed.
• Usage and log data is typically retained for up to twenty-four (24) months.

You may request deletion of your account and associated personal data at any time by contacting us at support@builtbynature.com. Upon receiving a verified deletion request, we will delete or anonymize your personal data within thirty (30) days, except for data we are legally required to retain.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten") — You have the right to request the deletion of your personal data, subject to certain legal exceptions.
• Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Restriction of Processing — You have the right to request that we restrict the processing of your personal data under certain circumstances.
• Right to Object — You have the right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.

To exercise any of these rights, please contact us at support@builtbynature.com. We will respond to your request within thirty (30) days. We may ask you to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

The legal bases for our processing of your personal data include: performance of a contract (providing our services), your consent (where applicable), compliance with legal obligations, and our legitimate interests (such as fraud prevention and Platform improvement).

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

• Right to Know — You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You have the right to request the deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing — You have the right to opt out of the "sale" or "sharing" of your personal information. Built by Nature does not sell or share your personal information as those terms are defined under the CCPA/CPRA.
• Right to Correct — You have the right to request correction of inaccurate personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, provide a different level of service, or suggest any such treatment.

To exercise your rights, contact us at support@builtbynature.com. We will verify your identity before fulfilling your request and will respond within forty-five (45) days.

The Platform is strictly intended for users who are eighteen (18) years of age or older. We do not knowingly collect personal information from anyone under the age of 18. Age verification is required during account registration.

If we learn that we have collected personal information from a person under the age of 18, we will delete that information immediately. If you believe that a minor has provided us with personal information, please contact us at support@builtbynature.com so that we can take appropriate action.

Built by Nature LLC is based in the United States. Your personal data is stored and processed in the United States through our service providers, including Supabase and Vercel.

If you are accessing the Platform from outside the United States, including from the European Economic Area, the United Kingdom, or other jurisdictions with data protection laws that may differ from U.S. law, please be aware that your data will be transferred to, stored, and processed in the United States.

By using the Platform, you consent to the transfer of your information to the United States. Where required by applicable law, we rely on appropriate legal mechanisms for international data transfers, including Standard Contractual Clauses approved by the European Commission.

We take the security of your personal information seriously and implement industry-standard technical and organizational measures to protect it, including:

• Encryption in transit and at rest — All data transmitted to and from the Platform is encrypted via TLS/SSL. Data stored in our databases is encrypted at rest.
• Secure hosting — Our Platform is hosted on Vercel with enterprise-grade security infrastructure.
• Row Level Security (RLS) policies — Our Supabase database implements Row Level Security policies to ensure users can only access data they are authorized to view.
• Access controls — We restrict access to personal information to authorized personnel who need it to perform their duties.
• PCI DSS-compliant payment processing — Payment data is handled exclusively by CCBill, a PCI DSS-compliant processor.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users and relevant authorities in the event of a data breach as required by applicable law.

The Platform may contain links to third-party websites, services, or applications that are not operated by Built by Nature. These include but are not limited to social media platforms, payment processors, and advertiser websites.

We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party services you access through links on our Platform. Clicking on a third-party link or enabling a third-party connection does not imply our endorsement of that third party.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if you have an account) or through a prominent notice on the Platform
• Where required by law, obtain your consent before applying material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal information is handled, please contact us:

We will endeavor to respond to all legitimate inquiries within thirty (30) days. If you feel that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local data protection supervisory authority.