Effective Date: April 15, 2026
Last Updated: April 15, 2026

Bonpara Inc. (“Bonpara,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your Personal Information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Information when you access or use:

• Bonpara websites, applications, software, APIs, widgets, dashboards, and payment pages;
• Kofe.al and other platforms, products, or services operated by Bonpara;
• Support Payments, Subscriptions, Virtual Gifts, and Sponsorship Campaigns;
• live chat, moderation, and artificial intelligence features;
• creator and livestreamer monetization tools; and
• any other service that links to this Privacy Policy,

collectively, the “Services.”

This Privacy Policy applies to Streamers, Supporters, Brands, visitors, account representatives, and other individuals who interact with the Services.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

Bonpara Inc. is a corporation registered in the State of Delaware, United States.

For most Personal Information processed under this Privacy Policy, Bonpara determines why and how the information is processed and acts as the data controller or business responsible for that information.

In certain circumstances, Bonpara may process Personal Information on behalf of a Streamer, Brand, business customer, or other organization. In those circumstances, Bonpara may act as a data processor or service provider, and the privacy policy of the relevant organization may also apply.

Our Services include Bonpara’s sub-platforms and brands, including Kofe.al.

2. Definitions

For purposes of this Privacy Policy:

“Brand” means an advertiser, agency, merchant, company, or other organization that uses the Services to create or participate in a Sponsorship Campaign.

“Personal Information” or “Personal Data” means information that identifies, relates to, describes, or can reasonably be associated with an identified or identifiable individual.

“Streamer” means a creator, livestreamer, influencer, broadcaster, publisher, or other user who uses the Services to receive payments, monetize content, communicate with supporters, or participate in Sponsorship Campaigns.

“Supporter” means a viewer, subscriber, customer, fan, or other person who makes a Support Payment, purchases a Subscription or Virtual Gift, uses live chat, or otherwise interacts with a Streamer through the Services.

“Support Payment” means a voluntary payment made to support a Streamer and may be described through the Services as a donation, tip, coffee, support payment, or similar term.

“User Content” means content submitted, published, transmitted, displayed, uploaded, or otherwise made available through the Services by a user, including profile information, livestream content, chat messages, Support Payment messages, images, audio, video, campaign content, AI prompts, and AI-generated responses.

3. Personal Information We Collect

The Personal Information we collect depends on how you interact with the Services, the features you use, your country, your account type, and whether you are a Streamer, Supporter, Brand, or visitor.

We may collect the following categories of information.

3.1 Account and Registration Information

When you create or manage an account, we may collect:

• full name;
• username;
• email address;
• telephone number;
• password or authentication credentials;
• country and language;
• date of birth or age confirmation;
• profile photograph;
• account type;
• account preferences;
• notification settings;
• referral information; and
• information about the person or business you represent.

We may also collect records of your acceptance of our Terms of Service, Privacy Policy, payment authorizations, and other agreements.

3.2 Streamer Profile Information

If you create a Streamer account, we may collect:

• public display name;
• biography and profile description;
• profile and cover images;
• livestream channel information;
• linked social media accounts;
• categories of content you create;
• profile links and QR codes;
• follower or audience information;
• Subscription packages and benefits;
• Virtual Gift preferences;
• monetization settings;
• payout status;
• public goals, alerts, and widgets; and
• other information you choose to display publicly.

Certain Streamer profile information is public and may be indexed by search engines or shared outside Bonpara.

3.3 Identity, Business, Tax, and Verification Information

To activate monetization, receive payouts, participate in Sponsorship Campaigns, prevent fraud, or comply with legal obligations, Bonpara or its payment and verification providers may collect:

• legal name;
• date of birth;
• residential or business address;
• nationality or country of residence;
• government-issued identification;
• taxpayer identification number;
• company registration information;
• company ownership and management information;
• bank account information;
• proof of address;
• identity verification photographs or selfies;
• sanctions and compliance screening results; and
• verification status and related records.

Stripe or another verification provider may collect some of this information directly.

Where a provider collects identity documents or biometric-related verification information directly, Bonpara may receive the verification result and limited related information rather than the complete underlying document or biometric template.

3.4 Payment and Transaction Information

When a Supporter makes a payment or a Streamer receives Creator Earnings, we may collect:

• payer and recipient identifiers;
• email address;
• payment amount;
• currency;
• transaction date and time;
• payment status;
• payment method type;
• limited payment-card information, such as card brand, expiration date, and last four digits;
• Subscription status and billing interval;
• Virtual Gift information;
• refund, reversal, and chargeback information;
• fraud and risk indicators;
• Stripe Connected Account identifiers;
• transfer and payout status;
• platform fees;
• payment-provider fees;
• applicable taxes;
• invoice and receipt information; and
• transaction-related communications.

Payment-card and banking information may be collected and processed directly by Stripe or another payment provider.

Bonpara generally does not receive or store complete payment-card numbers or card security codes.

3.5 Support Payment and Subscription Information

When you make or receive a Support Payment or Subscription payment, we may collect:

• the relevant Streamer;
• Supporter name or username;
• Support Payment message;
• amount and currency;
• recurring billing authorization;
• Subscription package;
• Subscription start, renewal, and cancellation dates;
• benefits accessed or delivered;
• refund requests;
• supporter and Streamer communications; and
• related transaction records.

Depending on the settings selected by the Supporter and Streamer, the Supporter’s name, username, payment message, amount, or Virtual Gift may be displayed publicly during a livestream or on a Streamer’s profile.

3.6 Virtual Gift Purchase and Creator Revenue-Share Information

Bonpara creates, provides, and sells Virtual Gifts that Supporters may purchase and activate in connection with participating Creators.

When a Virtual Gift is purchased, activated, displayed, refunded, or disputed, we may collect and process:

• the Supporter’s account or transaction identifier;
• the relevant Creator;
• the type and retail price of the Virtual Gift;
• currency;
• purchase date and time;
• payment and settlement status;
• any message submitted with the Virtual Gift;
• livestream, live chat, or activation context;
• whether the digital effect was queued, delivered, displayed, blocked, or failed;
• refund, reversal, and chargeback information;
• fraud and security indicators;
• the Creator Revenue Share associated with the transaction; and
• records relating to payment, customer support, accounting, taxation, and disputes.

Bonpara is the seller and provider of Virtual Gifts.

The relevant Creator participates in Bonpara’s Virtual Gift monetization program and may receive Creator Revenue Share from Bonpara for qualifying transactions associated with that Creator.

Creator Revenue Share is paid by Bonpara and is not a direct donation, gift, or payment from the Supporter to the Creator.

We may disclose limited Virtual Gift information to the relevant Creator where necessary to:

• display or activate the Virtual Gift;
• identify the Supporter according to the Supporter’s selected visibility settings;
• display an accompanying message;
• calculate and report Creator Revenue Share;
• provide monetization and performance analytics;
• investigate fraud, abuse, or technical issues; or
• respond to a refund request or payment dispute.

Depending on the Supporter’s settings, livestream configuration, and type of Virtual Gift, the following information may be displayed publicly:

• the Supporter’s display name or username;
• the type of Virtual Gift;
• an accompanying message;
• the time of activation; and
• the associated visual, audio, or interactive effect.

We do not provide the Creator with the Supporter’s complete payment-card number, card security code, or complete bank account information.

Bonpara may use Virtual Gift transaction information to:

• process and deliver the purchase;
• activate livestream or live chat effects;
• calculate Creator Revenue Share;
• process Creator transfers and payouts;
• prevent fraud and abuse;
• manage refunds and disputes;
• provide customer support;
• comply with accounting and tax obligations;
• measure product performance; and
• improve Virtual Gift functionality.

3.7 Sponsorship and Brand Campaign Information

When a Brand or Streamer uses Sponsorship Campaign features, we may collect:

• company and representative information;
• campaign briefs;
• target audiences;
• eligibility requirements;
• campaign budgets;
• proposed or agreed compensation;
• applications and invitations;
• campaign deliverables;
• content submitted for approval;
• revision requests;
• campaign communications;
• approval and rejection decisions;
• performance metrics;
• clicks, views, impressions, conversions, and engagement;
• social media account information;
• invoices and payment records; and
• information about disputes or campaign performance.

Brands may provide us with information about Streamers they wish to invite or evaluate for campaigns.

3.8 Livestream, Chat, and Community Information

When you use live chat, Streamer engagement tools, moderation systems, widgets, or community features, we may collect:

• chat messages;
• usernames and platform identifiers;
• reactions and commands;
• timestamps;
• moderation actions;
• blocked words and filters;
• reports and complaints;
• linked streaming platform;
• Streamer and moderator settings;
• livestream metadata;
• alert and widget activity; and
• information necessary to prevent spam, harassment, fraud, or abuse.

Chat messages and other interactions may be visible to the Streamer, moderators, other viewers, and users of the relevant third-party streaming platform.

3.9 Artificial Intelligence Information

When you use an AI-powered chatbot, assistant, moderation tool, recommendation system, content-generation feature, or other AI functionality, we may collect and process:

• prompts and instructions;
• chat messages;
• generated responses;
• Streamer configuration and preferences;
• moderation decisions;
• feedback about AI outputs;
• information submitted for summarization, translation, classification, or analysis;
• safety and abuse-detection information; and
• technical information related to AI performance.

AI features may process livestream, chat, or User Content in real time to generate responses, moderate content, provide recommendations, or perform requested functions.

Information submitted to an AI feature may be transmitted to third-party AI infrastructure providers that assist us in providing the feature.

You should not submit confidential, sensitive, regulated, or highly personal information to an AI feature unless the feature expressly supports that use and you are legally authorized to provide the information.

3.10 Customer Support and Communications

When you contact us, participate in a survey, report a problem, submit a complaint, or communicate with our team, we may collect:

• your name and contact details;
• account information;
• the content of your request;
• attachments and screenshots;
• transaction information;
• support history;
• call or meeting recordings, where permitted and disclosed;
• feedback;
• survey responses; and
• other information you choose to provide.

3.11 Information from Connected Platforms

You may connect the Services to third-party platforms, including streaming, social media, communication, or identity platforms.

Depending on your settings and the permissions you grant, we may receive:

• account name and username;
• profile image;
• channel identifier;
• social media profile information;
• email address;
• follower or subscriber counts;
• livestream status;
• chat messages;
• audience and engagement metrics;
• campaign performance information;
• access tokens;
• account connection status; and
• information permitted by the third-party platform.

The information we receive depends on the third-party platform, your privacy settings, and the permissions you approve.

You may be able to disconnect a third-party account through your Bonpara account or the relevant third-party platform.

3.12 Device, Log, and Usage Information

When you access the Services, we may automatically collect:

• IP address;
• device type;
• browser type and version;
• operating system;
• device identifiers;
• language and regional settings;
• approximate location derived from IP address;
• pages viewed;
• links clicked;
• referring website;
• session duration;
• account login activity;
• error and crash information;
• API activity;
• application performance;
• cookie and advertising identifiers;
• date and time of access; and
• interactions with emails, notifications, and features.

3.13 Information from Third Parties

We may receive information from:

• Stripe and other payment providers;
• banks, card networks, and financial institutions;
• identity and compliance providers;
• fraud-prevention and cybersecurity providers;
• connected streaming and social media platforms;
• Brands, agencies, and Sponsorship Campaign partners;
• analytics and advertising providers;
• customer-support providers;
• publicly available sources;
• other users; and
• Bonpara affiliates and sub-platforms.

We may combine information received from third parties with information we collect directly.

3.14 Inferences and Derived Information

We may derive information from the data described above, including:

• likely interests and preferences;
• preferred Streamers or content categories;
• fraud and security risk scores;
• campaign suitability;
• audience segments;
• engagement patterns;
• recommended features;
• account health indicators; and
• aggregated performance statistics.

We do not use solely automated decisions to produce legal or similarly significant effects unless permitted by applicable law and appropriate safeguards are provided.

4. How We Use Personal Information

We may use Personal Information for the following purposes.

4.1 Providing the Services

We use Personal Information to:

• create and manage accounts;
• authenticate users;
• create Streamer profiles;
• enable Support Payments;
• process Subscriptions;
• sell and display Virtual Gifts;
• connect Streamers with Brands;
• operate Sponsorship Campaigns;
• provide live chat and moderation;
• operate AI features;
• provide dashboards, analytics, and reports;
• connect third-party platforms;
• provide customer support; and
• deliver other requested features.

4.2 Processing Payments and Payouts

We use Personal Information to:

• process Support Payments and purchases;
• charge recurring Subscriptions;
• calculate platform fees;
• transfer Creator Earnings;
• facilitate Stripe Connected Account onboarding;
• issue receipts and invoices;
• process refunds and chargebacks;
• manage reserves and negative balances;
• prevent unauthorized payments;
• fulfill tax and accounting obligations; and
• facilitate payouts to Streamers; and
• calculate, allocate, transfer, adjust, and report Creator Revenue Share arising from qualifying Virtual Gift transactions.

4.3 Operating Sponsorship Campaigns

We use Personal Information to:

• evaluate Streamer eligibility;
• recommend campaigns;
• match Streamers with Brands;
• communicate campaign requirements;
• submit and review campaign content;
• verify completion of deliverables;
• measure campaign performance;
• detect fake engagement;
• facilitate campaign payments; and
• resolve campaign disputes.

4.4 Personalization and Recommendations

We may use Personal Information to personalize:

• Streamer recommendations;
• campaign opportunities;
• dashboards;
• language and regional settings;
• content and feature suggestions;
• Supporter experiences;
• Virtual Gifts;
• notifications; and
• other aspects of the Services.

4.5 Communications

We may use your contact details to send:

• account and security notices;
• payment and payout information;
• Subscription notices;
• transaction confirmations;
• campaign communications;
• policy and product updates;
• customer-support responses;
• service announcements; and
• marketing communications, where permitted.

You may unsubscribe from promotional email communications using the unsubscribe link in the relevant message.

You may continue to receive non-promotional communications necessary to operate your account or provide the Services.

4.6 Analytics and Service Improvement

We may use information to:

• understand how the Services are used;
• measure feature performance;
• identify errors;
• improve usability;
• test new features;
• develop new products;
• improve fraud and moderation systems;
• evaluate campaign performance;
• improve AI functionality; and
• create aggregated or de-identified statistics.

4.7 Safety, Security, and Fraud Prevention

We may process Personal Information to:

• secure user accounts;
• detect unauthorized access;
• prevent payment fraud;
• investigate suspicious activity;
• detect fake engagement;
• prevent spam, harassment, and abuse;
• enforce our Terms of Service;
• protect users and third parties;
• respond to security incidents; and
• comply with payment-provider requirements.

4.8 Legal and Compliance Purposes

We may use Personal Information to:

• comply with laws and regulations;
• conduct identity and sanctions screening;
• respond to court orders, subpoenas, and legal requests;
• investigate complaints;
• establish, exercise, or defend legal claims;
• maintain financial and tax records;
• enforce agreements;
• protect legal rights; and
• cooperate with regulatory and law-enforcement authorities.

4.9 Business Transactions

We may process Personal Information in connection with:

• a merger;
• acquisition;
• investment;
• financing;
• corporate restructuring;
• sale of assets;
• insolvency;
• due diligence; or
• another corporate transaction.

5. Legal Bases for Processing

Where the laws of the European Economic Area, United Kingdom, Switzerland, or another jurisdiction require us to identify a legal basis, we generally rely on one or more of the following:

Performance of a Contract

We process Personal Information where necessary to:

• create and manage your account;
• process payments or payouts;
• provide Subscriptions or Virtual Gifts;
• operate Sponsorship Campaigns;
• deliver requested AI or chat features; and
• provide the Services under our Terms of Service.

Legitimate Interests

We may process Personal Information for legitimate business interests, including:

• preventing fraud;
• securing the Services;
• improving products;
• understanding Service usage;
• conducting analytics;
• providing relevant recommendations;
• enforcing agreements;
• protecting users; and
• operating our business.

We consider the effect of this processing on your rights and interests.

Consent

We rely on consent where required, including for:

• certain cookies;
• certain marketing communications;
• optional account connections;
• certain uses of sensitive information;
• location information;
• biometric-related verification where applicable; and
• other processing for which consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing already completed before consent was withdrawn.

Legal Obligation

We process Personal Information where necessary to comply with:

• tax laws;
• financial regulations;
• sanctions requirements;
• anti-money-laundering requirements;
• court orders;
• legal reporting duties; and
• other legal obligations.

Protection of Rights and Safety

In limited circumstances, we may process Personal Information where necessary to protect the vital interests, safety, rights, or property of users, Bonpara, or another person.

6. How We Disclose Personal Information

We may disclose Personal Information to the following categories of recipients.

6.1 Stripe and Financial Service Providers

We may disclose information to:

• Stripe;
• banks;
• payment processors;
• card networks;
• payout providers;
• payment-method providers;
• tax providers;
• identity verification providers; and
• fraud-prevention providers.

These parties use information to process payments, conduct verification, prevent fraud, handle disputes, calculate taxes, transfer Creator Earnings, and execute payouts.

Stripe may independently collect and process Personal Information under its own privacy policy.

6.2 Streamers and Supporters

To complete transactions and provide the Services, we may share information between Streamers and Supporters.

A Streamer may receive:

• Supporter name or username;
• Support Payment or Subscription information;
• payment amount and currency;
• Support Payment message;
• Virtual Gift details;
• Subscription status;
• limited transaction details; and
• information necessary to provide purchased benefits or respond to a dispute.

A Supporter may receive:

• Streamer name and profile information;
• Subscription package information;
• transaction confirmation;
• receipt information;
• payment status; and
• information regarding refunds or cancellations.

We do not provide Streamers with a Supporter’s complete payment-card number.

A Creator may receive limited information regarding Virtual Gift transactions associated with their livestream or creator page, including the Supporter’s selected display name, Gift type, accompanying message, activation status, and the Creator Revenue Share attributed to the transaction.

6.3 Brands, Agencies, and Campaign Participants

For Sponsorship Campaigns, we may disclose information among:

• participating Brands;
• Streamers;
• advertising agencies;
• campaign administrators;
• analytics providers; and
• other authorized campaign participants.

This may include profile, audience, campaign, content, performance, payment, and communication information.

6.4 Service Providers

We may disclose Personal Information to providers that perform services for us, including:

• cloud hosting;
• database management;
• content delivery;
• cybersecurity;
• customer support;
• email and communication services;
• analytics;
• AI infrastructure;
• moderation;
• identity verification;
• fraud prevention;
• legal and accounting services;
• marketing; and
• technical development.

These providers are permitted to process Personal Information only for authorized purposes, subject to applicable agreements and legal requirements.

6.5 Connected Third-Party Platforms

When you connect or use the Services with a third-party platform, we may send and receive information necessary to provide the integration.

Third-party platforms process information according to their own terms and privacy policies.

6.6 Affiliates and Sub-Platforms

We may disclose information among Bonpara-controlled entities, brands, and sub-platforms, including Kofe.al, for:

• account administration;
• payment processing;
• customer support;
• product development;
• fraud prevention;
• analytics; and
• other purposes described in this Privacy Policy.

6.7 Legal and Safety Disclosures

We may disclose Personal Information where we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to legal process;
• cooperate with regulatory authorities;
• prevent fraud or illegal activity;
• protect users;
• investigate security incidents;
• enforce our agreements;
• protect Bonpara’s rights or property; or
• respond to an emergency involving risk of harm.

6.8 Business Transfers

Personal Information may be disclosed or transferred in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.

6.9 With Your Direction or Consent

We may disclose information to another person or organization when you instruct us to do so or provide consent.

6.10 Aggregated and De-Identified Information

We may use and disclose aggregated or de-identified information that cannot reasonably identify you.

We will not attempt to re-identify de-identified information except to test whether our de-identification processes are effective or as otherwise permitted by law.

7. Public Information

Certain features are designed to display information publicly.

Depending on your settings and activity, public information may include:

• Streamer name and username;
• profile photograph;
• biography;
• linked social accounts;
• livestream channel;
• Subscription packages;
• sponsorship content;
• Supporter name or username;
• Support Payment message;
• Support Payment amount;
• Virtual Gifts;
• chat messages;
• supporter badges;
• campaign participation; and
• other User Content.

Public information may be:

• viewed by other users;
• shown during livestreams;
• shared on third-party platforms;
• captured in screenshots or recordings;
• indexed by search engines; and
• redistributed by persons outside Bonpara.

You should not include information in public fields that you do not want others to see or share.

8. Artificial Intelligence and Automated Processing

Bonpara may use automated systems and AI to:

• operate chatbots;
• generate responses;
• moderate live chat;
• identify spam and harmful content;
• summarize or translate content;
• recommend campaigns;
• personalize features;
• detect fraud;
• classify content;
• support Streamers; and
• improve Service performance.

AI-generated outputs may be inaccurate, incomplete, or inappropriate. Users should review AI outputs before relying on or publishing them.

We may use third-party AI service providers to process prompts, messages, content, and related technical information for the purpose of providing AI features.

Where reasonably possible, we configure service providers to process information only for authorized purposes and subject to contractual restrictions.

We may retain AI interactions for:

• providing conversation history;
• improving feature performance;
• preventing abuse;
• investigating complaints;
• enforcing policies; and
• meeting legal obligations.

Where applicable law gives you the right to object to or opt out of automated decision-making that produces legal or similarly significant effects, you may contact us using the details below.

9. Cookies and Similar Technologies

We and our service providers may use:

• cookies;
• pixels;
• software development kits;
• local storage;
• web beacons;
• device identifiers; and
• similar technologies.

These technologies may be used for the following purposes.

Strictly Necessary Technologies

These are necessary to:

• operate the website;
• authenticate users;
• process transactions;
• secure accounts;
• remember privacy settings; and
• prevent fraud.

Functional Technologies

These help us remember:

• language;
• login preferences;
• account settings;
• connected platforms; and
• other customization choices.

Analytics Technologies

These help us understand:

• visitor numbers;
• traffic sources;
• feature usage;
• user journeys;
• technical errors; and
• Service performance.

Advertising Technologies

Where enabled and permitted by law, advertising technologies may be used to:

• measure advertising performance;
• deliver relevant advertising;
• limit repeated advertisements;
• understand marketing conversions; and
• create or use audience segments.

Browser settings may also allow you to block or delete cookies. Blocking certain cookies may affect Service functionality.

10. Marketing Choices

You may opt out of promotional emails by:

• clicking the unsubscribe link in the email;
• changing account communication settings; or
• contacting us.

Opting out of marketing does not prevent us from sending necessary account, transaction, security, legal, or service communications.

Where required by law, we obtain consent before sending marketing communications.

11. Data Sale, Sharing, and Targeted Advertising

Bonpara does not sell Personal Information to third parties in exchange for money.

Where advertising or analytics technologies are enabled, the disclosure of online identifiers, cookie information, device information, or browsing activity to advertising partners may be considered a “sale,” “sharing,” or use for targeted advertising under certain United States state privacy laws.

Where applicable, you may opt out by:

• using our cookie settings;
• selecting “Do Not Sell or Share My Personal Information” at [PRIVACY CHOICES URL];
• enabling a legally recognized opt-out preference signal, such as Global Privacy Control; or
• contacting us.

Bonpara does not knowingly sell or share for targeted advertising the Personal Information of users under 16.

12. Data Retention

We retain Personal Information for as long as reasonably necessary to:

• provide the Services;
• maintain your account;
• process transactions and payouts;
• provide Subscription benefits;
• complete Sponsorship Campaigns;
• comply with tax, accounting, and legal obligations;
• prevent fraud;
• manage chargebacks;
• enforce agreements;
• resolve disputes;
• maintain security; and
• establish or defend legal claims.

Retention periods depend on:

• the type of information;
• the purpose for which it was collected;
• legal requirements;
• financial and tax obligations;
• payment-provider requirements;
• fraud and security risks;
• whether an account remains active; and
• whether a dispute or legal claim exists.

After the applicable retention period, we may delete, anonymize, or securely isolate the information.

Closing an account does not require us to immediately delete information that must be retained for legal, financial, fraud-prevention, security, or dispute-resolution purposes.

Public User Content may remain available outside Bonpara if it was copied, recorded, indexed, or shared by third parties before deletion.

13. Data Security

We use reasonable administrative, organizational, physical, and technical safeguards designed to protect Personal Information from:

• unauthorized access;
• loss;
• misuse;
• alteration;
• destruction; and
• unauthorized disclosure.

These safeguards may include:

• encryption;
• access restrictions;
• authentication controls;
• monitoring;
• fraud-detection systems;
• security testing;
• internal policies; and
• service-provider controls.

No online service, transmission method, or storage system is completely secure. We cannot guarantee absolute security.

You are responsible for protecting your password, authentication credentials, devices, and connected third-party accounts.

Notify us promptly if you believe your account has been compromised.

14. International Data Transfers

Bonpara is based in the United States and may use service providers located in the United States and other countries.

Your Personal Information may therefore be transferred to, stored in, or processed in countries whose data-protection laws differ from those in your country.

Where required by law, we use appropriate safeguards for international transfers, which may include:

• standard contractual clauses;
• data-processing agreements;
• adequacy decisions;
• contractual commitments;
• technical and organizational safeguards; and
• other legally recognized transfer mechanisms.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• request access to your Personal Information;
• receive information about how it is processed;
• request correction of inaccurate information;
• request deletion;
• request restriction of processing;
• object to certain processing;
• receive a portable copy of certain information;
• withdraw consent;
• opt out of targeted advertising;
• opt out of the sale or sharing of Personal Information;
• limit certain uses of sensitive Personal Information;
• opt out of certain automated decision-making;
• appeal a decision regarding a privacy request; and
• lodge a complaint with a data-protection authority.

These rights are subject to legal limitations and exceptions.

For example, we may need to retain information to:

• complete a transaction;
• comply with law;
• prevent fraud;
• protect users;
• maintain financial records;
• resolve disputes; or
• exercise or defend legal claims.

16. Exercising Your Privacy Rights

To submit a privacy request, contact us at:

Email: [email protected]

Your request should identify:

• your name;
• the email address associated with your account;
• your country or state of residence;
• the right you wish to exercise; and
• sufficient information to identify the relevant account or records.

We may need to verify your identity before completing a request.

Verification may require:

• confirmation from the account email address;
• account information;
• transaction information;
• proof of identity; or
• other information reasonably necessary to prevent unauthorized disclosure or deletion.

We will use verification information only for identity verification, security, fraud prevention, and legal compliance.

You may use an authorized agent to submit a request where permitted by law. We may require proof that the agent is authorized to act for you and may ask you to verify your identity directly.

We will respond within the period required by applicable law.

You will not be discriminated against for exercising a legally protected privacy right.

17. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data-protection law, including rights to:

• access;
• correction;
• deletion;
• restriction;
• objection;
• data portability;
• withdrawal of consent; and
• complaint to a supervisory authority.

Where we rely on legitimate interests, you may object to the processing based on your particular circumstances.

Where Personal Information is used for direct marketing, you may object at any time.

You may submit requests using the contact information in Section 16.

Bonpara Inc. is the controller for the processing described in this Privacy Policy unless another entity is expressly identified.

18. United States State Privacy Notice

This section supplements the rest of this Privacy Policy for residents of California and other United States states with applicable comprehensive privacy laws.

During the preceding 12 months, depending on how users interacted with the Services, Bonpara may have collected the following categories of Personal Information:

Identifiers

Examples include:

• name;
• username;
• email address;
• IP address;
• account identifiers;
• government identifiers; and
• device identifiers.

Customer and Financial Information

Examples include:

• billing information;
• payment method type;
• bank or payout information;
• transaction history;
• Creator Earnings; and
• Subscription information.

Protected Classification Information

Examples may include:

• age;
• date of birth;
• nationality; and
• other information collected for identity or legal compliance.

Commercial Information

Examples include:

• Support Payments;
• Subscriptions;
• Virtual Gifts;
• sponsorship activity;
• refunds;
• purchases; and
• transaction history.

Internet and Electronic Activity

Examples include:

• browsing activity;
• application usage;
• device information;
• interactions with advertisements;
• chat activity; and
• connected-platform activity.

Approximate Geolocation

We may derive an approximate location from an IP address.

Audio, Visual, and Electronic Information

Examples may include:

• profile photographs;
• livestream content;
• campaign content;
• customer-support recordings;
• chat messages; and
• uploaded media.

Professional or Business Information

Examples include:

• business name;
• role;
• creator category;
• company ownership;
• campaign history; and
• professional social media profiles.

Inferences

Examples include:

• preferences;
• interests;
• engagement patterns;
• campaign suitability;
• fraud risk; and
• feature recommendations.

Sensitive Personal Information

Depending on the Service, this may include:

• government identification;
• taxpayer identification;
• account login credentials;
• precise financial account information;
• identity verification information; and
• information necessary for legal or regulatory compliance.

We use Sensitive Personal Information only for purposes reasonably necessary to:

• provide requested Services;
• process payments and payouts;
• verify identity;
• prevent fraud;
• protect security;
• comply with law; and
• perform other purposes permitted without a separate right to limit.

We collect these categories from:

• users;
• connected platforms;
• payment and verification providers;
• Brands and campaign participants;
• service providers;
• publicly available sources; and
• user activity on the Services.

We use and disclose these categories for the business purposes described in Sections 4 and 6.

We do not sell Personal Information for monetary consideration.

Where applicable advertising technologies are enabled, we may share identifiers and internet activity with analytics or advertising partners in a manner that may be considered “sharing” for cross-context behavioral advertising under certain state laws.

Residents of applicable states may have rights to:

• know;
• access;
• delete;
• correct;
• obtain portability;
• opt out of sale;
• opt out of sharing or targeted advertising;
• limit certain uses of sensitive information;
• opt out of qualifying profiling; and
• appeal certain privacy decisions.

California residents may generally request information about the categories and specific pieces of Personal Information collected, the sources, purposes, and categories of recipients, subject to legal exceptions.

Privacy requests may be submitted using the methods described in Section 16.

19. Global Privacy Control and Do Not Track

Where required by applicable law, we process recognized browser-based opt-out preference signals, including Global Privacy Control, as a request to opt out of qualifying sale, sharing, or targeted advertising for the browser or device sending the signal.

Because there is no universally accepted standard for browser “Do Not Track” signals, the Services may not respond to signals other than those legally recognized in the relevant jurisdiction.

20. Children and Teenagers

The Services are not directed to children under 16.

We do not knowingly allow a child under 16 to create an account or knowingly collect Personal Information directly from a child under 16.

In the United States, the Services are not intended for children under 13, and we do not knowingly collect Personal Information from children under 13.

Users between 16 and 18, or below the legal age of majority in their jurisdiction, may only use the Services under the supervision of a parent or legal guardian who agrees to our Terms of Service.

A Streamer who receives payments may be required to be at least 18 or the legal age of majority, unless a legally permitted parent or guardian controls the payment and payout account.

If you believe a child has provided Personal Information in violation of this section, contact us at [email protected] .

We may request information necessary to verify the request and will take appropriate steps to delete or restrict the information where required.

21. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications, payment providers, streaming platforms, social networks, or other services.

Bonpara does not control the privacy practices of independent third parties.

This Privacy Policy does not apply to information collected independently by:

• Stripe;
• banks and card networks;
• streaming platforms;
• social media platforms;
• Brands;
• external websites;
• third-party applications; or
• other independent service providers.

You should review the privacy policies of those third parties.

22. Streamer Responsibilities

Streamers may receive Personal Information about Supporters through the Services.

Streamers must:

• use Supporter information only for legitimate purposes;
• protect the information;
• comply with applicable privacy and marketing laws;
• respect communication preferences;
• avoid unauthorized disclosure;
• provide any privacy notices required for their own independent processing; and
• delete information when no longer legally required.

Where a Streamer exports or uses Supporter information outside Bonpara, the Streamer may act as an independent data controller or business responsible for that use.

Bonpara is not responsible for a Streamer’s independent use of information outside the Services.

23. Brand Responsibilities

Brands and agencies may receive Personal Information about Streamers in connection with Sponsorship Campaigns.

Brands must:

• use the information only for legitimate campaign and business purposes;
• comply with applicable privacy laws;
• protect the information;
• avoid unauthorized marketing;
• respect Streamer rights;
• comply with campaign agreements; and
• provide any legally required privacy notices.

A Brand’s independent processing of Streamer information is governed by the Brand’s own privacy practices.

24. Account Closure and Deletion

You may request account closure through the available account settings or by contacting us.

Following closure:

• public profile information may be removed or restricted;
• active Subscriptions may be canceled;
• connected-platform access may be revoked;
• some information may remain in backups for a limited period;
• transaction and payout records may be retained;
• fraud and security records may be retained;
• dispute-related records may be retained; and
• information required by law may remain stored.

Account deletion does not automatically delete information independently retained by Stripe, Brands, Streamers, connected platforms, banks, or other third parties.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• changes to the Services;
• new features;
• new data practices;
• legal or regulatory requirements;
• security developments; or
• changes to our service providers.

We will post the updated Privacy Policy and revise the “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

26. Contact Us

Questions, complaints, and privacy requests may be directed to:

Bonpara Inc.

Attn: Privacy Team

Address: DE, USA

Email: privacy @ bonpara.com

Support: help @ bonpara.com

For residents of jurisdictions that provide a right to complain to a regulator, you may also contact the relevant data-protection or consumer-protection authority.

27. Language

This Privacy Policy may be translated into other languages.

Unless applicable law requires otherwise, the English version controls where a translated version conflicts with the English version.