1. Who we are
1.1This policy explains how PROPAGANDISTAN, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA ("we", "us") handles personal data when you visit our websites, buy Fanpage Kit, claim our guarantee, join our community or contact us.
1.2We are the controller of your personal data under the EU and UK General Data Protection Regulation (GDPR and UK GDPR), and the business responsible for it under US state privacy laws.
1.3Contact: help@propagandistan.com. Privacy requests: use the subject line "Privacy request".
1.4This policy does not cover TikTok, Instagram, payment providers or other third-party services you use alongside the Kit. Their own policies apply.
2. What we collect
We collect only what we need to sell the Kit, deliver it, run the guarantee and support you.
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, email address, artist or band name | You, at checkout or signup |
| Order and billing | Products bought, price, currency, billing country and postcode, VAT or tax ID if given, last 4 digits and type of card, subscription status | You and our payment processor |
| Payment card details | Full card number and security code | Collected directly by our payment processor; we never see or store them |
| Guarantee claims | TikTok handle, links to your videos, screen recordings, view counts, posting dates | You, when you claim |
| Support | Messages, attachments and the details you include | You |
| Community | Username, profile, posts, messages and reactions in our buyer community | You |
| Marketing preferences | Whether you subscribed, opened or clicked our emails | You and our email provider |
| Device and usage | IP address, approximate location derived from IP, browser, device type, pages viewed, referring site, time of visit | Automatically, through cookies and similar technology (section 4) |
| Fraud signals | IP address, payment risk scores, order patterns | Our payment processor and our own systems |
We do not ask for sensitive data such as health, ethnicity, religion or political views. Please do not send it to us. Providing order and contact data is necessary to buy the Kit; without it we cannot deliver it.
3. How we use it and our legal bases
Each use below has a legal basis under GDPR Article 6. US readers can treat the legal-basis column as the business purpose.
| Purpose | Data used | Legal basis (EU/UK) |
|---|---|---|
| Process your order, deliver Kits, manage subscriptions and renewals | Identity, order and billing | Contract |
| Review guarantee claims and pay refunds | Identity, order, guarantee claim | Contract |
| Answer support requests | Identity, support, order | Contract; legitimate interests in helping you |
| Run the buyer community | Identity, community | Contract |
| Keep tax, accounting and consumer-law records | Identity, order and billing | Legal obligation |
| Prevent fraud, chargeback abuse and repeat guarantee claims | Identity, order, guarantee claim, fraud signals, device | Legitimate interests in protecting our business |
| Send transactional emails (receipts, delivery, renewal and price notices) | Identity and contact | Contract; legal obligation |
| Send marketing emails to customers about similar products | Identity, marketing preferences | Legitimate interests (EU/UK "soft opt-in"); you can unsubscribe at any time |
| Send marketing emails to non-customers | Identity, marketing preferences | Consent |
| Measure site traffic and improve our pages | Device and usage | Consent where cookies are non-essential |
| Show and measure ads on Meta, TikTok, Google and YouTube | Device and usage, hashed email | Consent |
| Use posted videos made with the Kit as marketing examples (Terms 6.4) | Your public TikTok handle and video | Legitimate interests; you can opt out by email |
| Establish, exercise or defend legal claims | Any relevant data | Legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights. You may object at any time (section 8). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Cookies, pixels and tracking
4.1We use cookies and similar technology (pixels, SDKs, local storage) in three groups:
| Group | What it does | Needs your consent? |
|---|---|---|
| Strictly necessary | Checkout, login, security, remembering your cookie choice | No |
| Analytics | Counts visits and shows how pages are used, via PostHog | Yes in the EU/UK; opt-out in the US |
| Advertising | Meta Pixel, TikTok Pixel, Google Ads and YouTube tags, and similar tools that measure ad results and build audiences | Yes in the EU/UK; opt-out in the US |
4.2EU and UK visitors: non-essential cookies stay off until you accept them in our cookie banner. You can change your choice at any time through the "Cookie settings" link in our site footer.
4.3US visitors: advertising cookies may be active by default. You can turn them off through "Cookie settings" or the "Do Not Sell or Share My Personal Information" link. We treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out of sale and sharing for that browser.
4.4Some browsers send "Do Not Track" signals. There is no common standard for them, so we rely on GPC and your cookie settings instead.
5. Who we share it with
5.1We share personal data only with the recipients below, and only what each needs:
| Recipient | Purpose | Examples |
|---|---|---|
| Payment processor | Take payments, prevent fraud, handle refunds and disputes | Stripe, Shopify Payments |
| Hosting and storefront | Run our website, checkout and file delivery | Shopify |
| Email provider | Send transactional and marketing emails | Klaviyo |
| Community platform | Host the buyer community | Discord |
| Analytics provider | Measure site use | PostHog |
| Advertising platforms | Measure ads and build audiences, with your consent or unless you opt out | Meta, TikTok, Google (including YouTube) |
| Professional advisers | Legal, accounting and tax advice | Lawyers, accountants |
| Authorities | When the law requires it, or to protect our rights | Tax authorities, courts, regulators |
5.2Service providers act on our instructions under written contracts and may not use your data for their own purposes. Advertising platforms may use data they receive under their own policies. Discord also processes your account and community activity under its own privacy policy, as you hold your Discord account directly with them.
5.3Sale and sharing (US law). We do not sell personal data for money. Letting advertising platforms collect data through pixels on our site may count as "selling" or "sharing" for cross-context behavioural advertising under California and other state laws. You can opt out as described in section 4.3 and section 9. We do not knowingly sell or share data of anyone under 16.
6. International transfers
6.1We are based in the US, and most of our service providers process data in the US. If you are in the EU, EEA or UK, your data is transferred outside those regions.
6.2We protect these transfers with one of the following:
- the recipient's certification under the EU-US Data Privacy Framework and its UK Extension;
- the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum for UK data;
- an adequacy decision for the destination country.
6.3You can ask for a copy of the safeguards that apply by emailing help@propagandistan.com.
7. How long we keep it
We keep data only as long as the purpose requires, then delete or anonymise it.
| Data | How long |
|---|---|
| Order, billing and tax records | 7 years after the purchase, to meet tax and accounting law |
| Account and subscription data | While your account or subscription is active, plus 2 years |
| Guarantee claims and evidence | 3 years after the claim decision, to enforce the one-claim-per-customer rule and defend disputes |
| Support messages | 3 years after the last message |
| Community content | While you are a member; deleted or anonymised within 90 days after you leave |
| Marketing list data | Until you unsubscribe, then kept as a suppression record so we do not email you again |
| Analytics and advertising cookies | Up to 13 months |
We may keep data longer if needed for a legal claim or an investigation, until it is resolved.
8. Your rights in the EU, EEA and UK
8.1Under GDPR and UK GDPR you have the right to:
- access your data and get a copy;
- correct inaccurate or incomplete data;
- delete your data, where we no longer need it or have no legal basis to keep it;
- restrict our use of it while a complaint is checked;
- port data you gave us, in a machine-readable format;
- object to uses based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, without affecting earlier processing.
8.2How to ask. Email help@propagandistan.com with "Privacy request" in the subject. We may ask you to confirm your identity, usually from the email address on your order. We reply within one month. For complex or numerous requests we may extend this by up to two more months and will tell you why.
8.3Some rights have limits. For example, we must keep tax records for the periods in section 7 even if you ask us to delete them.
8.4Complaints. You can complain to the data protection authority where you live or work, or where you think a breach happened. In the UK, that is the Information Commissioner's Office (ico.org.uk). EU authorities are listed by the European Data Protection Board (edpb.europa.eu). We would appreciate the chance to resolve your concern first.
9. Your rights in the US
9.1This section applies to residents of California and other US states with comprehensive consumer privacy laws, to the extent those laws apply to us.
9.2Categories of personal information. In the last 12 months we have collected the following categories, as defined by the California Consumer Privacy Act (CCPA), from the sources in section 2 and for the purposes in section 3:
| CCPA category | What it covers here | Disclosed for a business purpose | Sold or shared |
|---|---|---|---|
| Identifiers | Name, email, artist name, TikTok handle, IP address | Yes | Yes, IP address and hashed email via ad pixels |
| Customer records | Billing details, last 4 card digits | Yes | No |
| Commercial information | Products bought, subscription and refund history | Yes | Yes, purchase events via ad pixels |
| Internet or network activity | Pages viewed, browser and device data | Yes | Yes, via ad pixels |
| Approximate geolocation | Country and region derived from IP | Yes | Yes, via ad pixels |
| Audio, visual or similar | Screen recordings sent with guarantee claims | Yes | No |
We do not collect sensitive personal information to infer characteristics about you, and we do not use precise geolocation.
9.3Your rights. Depending on your state, you have the right to:
- know what personal information we collect, use, disclose, sell and share, and get a copy of it;
- delete it, subject to legal exceptions;
- correct inaccurate information;
- opt out of the sale or sharing of your personal information and of targeted advertising;
- not be discriminated against for using these rights. We will not charge you a different price or give you a worse service for doing so.
9.4How to use them.
- Opt out of sale, sharing and targeted advertising: click "Do Not Sell or Share My Personal Information" in our site footer, use "Cookie settings", or turn on Global Privacy Control in your browser.
- All other requests: email help@propagandistan.com with "Privacy request" in the subject.
We verify your identity by matching details with our records, usually your order email. We respond within 45 days and may extend by another 45 days where the law allows, telling you why.
9.5Authorised agents. You may use an authorised agent. We may ask the agent for signed permission from you and ask you to verify your identity directly.
9.6Appeals. If we decline your request, you may appeal by replying to our decision email with "Appeal" in the subject. We answer appeals within 60 days. If you are unhappy with the outcome, you may contact your state attorney general.
10. Children, security, changes and contact
10.1Children. Our products are for adults aged 18 or over, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, email help@propagandistan.com and we will delete it.
10.2Security. We use encryption in transit, access controls limited to staff who need the data, and providers that meet recognised security standards. No system is completely secure. If a breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.
10.3Changes. We may update this policy. The date below shows the latest version. For material changes we will notify customers by email or with a notice on our site before the change takes effect.
10.4Contact. PROPAGANDISTAN, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Email: help@propagandistan.com.