Privacy Policy

MicroStreams LLC ("MicroStreams," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and your rights as a user. By using MicroStreams, you agree to the practices described here.

1. Information We Collect

Information you provide directly:

• Account information — your name, email address, and phone number when you create an account or accept an offer.
• Submission details — item descriptions, photos, category, condition, brand, model, and any notes you include when submitting an item for review.
• Payment method — your Venmo handle, PayPal email address, or bank account details, so we can send you monthly payments.
• Tax information — if your annual payments reach the IRS $600 reporting threshold, we collect your legal name, mailing address, and tax ID (Social Security Number or Employer Identification Number) via a W-9 form.

Information collected automatically:

• Usage data — pages visited, time on page, and referring URLs, collected via Vercel Analytics. This data is anonymized and does not include personal identifiers.
• Authentication cookies — session cookies managed by Supabase to keep you logged in. These are required for the service to function.

2. How We Use Your Information

• To process item submissions and communicate offers to you.
• To send monthly payments to your chosen payment account.
• To send you transactional emails: submission confirmations, offer notifications, and payment receipts.
• To contact you by email or phone about your account — including tax compliance reminders, payment issues, and activity check-ins.
• To issue 1099-NEC tax forms and report qualifying payments to the IRS as required by law.
• To monitor and improve the security and performance of our platform.

We do not use your information for advertising, behavioral tracking, or any purpose not listed here.

3. Tax Identification — Special Protections

Your Social Security Number or EIN receives the highest level of protection we offer:

• It is encrypted using AES-256-GCM encryption immediately upon submission.
• The original, unencrypted number is never stored anywhere in our systems.
• No MicroStreams employee can read your tax ID from our database — it can only be decrypted through an audited process specifically for IRS 1099 filing.
• Your tax ID is never used for any purpose other than IRS-required tax reporting.

4. Information Sharing

We do not sell your personal information. We share it only with the following service providers, and only to the extent necessary to operate MicroStreams:

• Supabase — our database and authentication provider. Stores your account data, item submissions, payment method information, and encrypted tax data. Supabase Privacy Policy.
• Stripe — used to process curiosity payments on the /onedollar page. Stripe handles payment card data directly; MicroStreams does not store card numbers. Stripe Privacy Policy.
• Resend — our email delivery service. Receives your email address and the content of transactional emails we send you. Resend Privacy Policy.
• Vercel — our hosting provider. Processes web requests and hosts the application. Vercel Privacy Policy.
• IRS and tax authorities — we are required by law to report qualifying payments and share your W-9 information for 1099-NEC filings.

5. Cookies

MicroStreams uses session cookies managed by Supabase for authentication — these are required to keep you logged in and are deleted when your session ends or you log out. We do not use advertising cookies, tracking pixels, or any third-party behavioral analytics cookies. Vercel Analytics collects anonymized page-view data without using cookies.

6. Data Retention

• Account data — retained while your account is active. If your account is inactive for an extended period with no open items or guaranteed payments, we may delete it after providing notice.
• Tax identification (SSN/EIN) — retained for 7 years after the last tax filing it is associated with, as required by IRS recordkeeping requirements. This retention applies even if you delete your account.
• Payment records — retained for 7 years for tax and accounting purposes.
• Payment method information — you can update or remove this at any time from your account settings.

7. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — update inaccurate information via your account settings, or by contacting us directly.
• Deletion — request deletion of your account and personal data. Note: tax identification and payment records subject to IRS retention requirements (see Section 6) cannot be deleted during the required retention period.
• Portability — request a copy of your data in a portable format.
• Opt out of non-essential communications — you may opt out of marketing emails (if any) at any time. Transactional emails related to your account and payments cannot be opted out of while your account is active.

To exercise any of these rights, contact us at info@microstreams.co.

8. California Privacy Rights

As a California-based company, we comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). California residents have the right to:

• Know what personal information we collect, use, disclose, or sell.
• Request deletion of personal information (subject to legal exceptions).
• Opt out of the sale of personal information — we do not sell personal information.
• Non-discrimination for exercising these rights.

To submit a California privacy rights request, email us at info@microstreams.co.

9. Security

We take security seriously. Our measures include:

• AES-256-GCM encryption for all stored tax identification numbers.
• HTTPS for all data in transit.
• Row-level security on our database — each user can only access their own data.
• Server-side authentication and session management.

No system is completely secure. If you believe your account has been compromised, contact us immediately at info@microstreams.co.

10. Children's Privacy

MicroStreams is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you by email. Continued use of MicroStreams after changes are posted constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy or how your data is handled? Email us at info@microstreams.co or reach us via the contact page.

MicroStreams LLC
California, United States