PRIVACY POLICY

You provide directly: your phone number (used to verify your account), a handle and optional avatar/bio, an age self-confirmation (a yes/no confirmation that you're 18+ — we do not collect your date of birth), photos or videos you upload to a listing or to chat, chat messages, and — only if you win a sweepstake requiring physical shipment, or if you list an item for local pickup — a shipping name and address or approximate location.

Collected automatically: device and usage information (pages viewed, general performance/analytics events), and, if you grant permission, your device's GPS location, used only to show or hide local-pickup listings near you.

Payment information: when you add funds or receive a payout, your card or bank details are collected and processed directly by Stripe, our payment processor — SHABANG never receives or stores your full card number.

We do not knowingly collect information from anyone under 18. The Service requires self-confirmed age 18+ to create an account at all.

We use the information above to:

• Operate your account, process entries, and run and settle sweepstake/giveaway drawings;
• Process payments, payouts, and refunds;
• Ship or arrange pickup of a prize you've won;
• Moderate uploaded photos, videos, and text for prohibited content;
• Detect and prevent fraud, multiple-accounting, and abuse — including, when location checks are on, the country of your connection and of your phone number, and, for anti-Sybil checks, the sign-up signals (browser and device characteristics) your device sent when you registered;
• Send transactional messages (entry confirmations, winner notifications, shipping updates); and
• Maintain and improve the Service's reliability and security.

We do not sell your personal information.

We share information with the following categories of service providers, only as needed for them to perform their function for us — never for their own independent marketing use:

• Stripe — payment processing and payouts;
• Clerk — account authentication;
• EasyPost — shipping labels and delivery tracking, when a prize is shipped;
• Amazon Web Services (Rekognition/S3), OpenAI, and, for optional one-tap background removal on a listing photo, remove.bg — automated processing and content moderation of uploaded photos, videos, and text;
• Twilio — verifying your phone number and screening it for VoIP/fraud signals at sign-up;
• Mapbox — converting the precise coordinates you provide for a local-pickup listing into an approximate city/state;
• Cloudflare (Turnstile) — bot/human verification on sensitive actions;
• Resend — delivering transactional emails;
• GIPHY — powering in-chat GIF search (your search terms are sent to GIPHY when you use that feature; no other account data is shared with it);
• Cloudflare Stream — hosting and transcoding listing videos;
• Dynamic — wallet sign-in and embedded wallets, when the wallet feature is on (your session with Dynamic runs in your browser; we receive only your wallet address);
• Alchemy — watching the Base network for USDC deposits to a wallet you linked (we send them your wallet address, nothing else);
• Chainalysis — sanctions screening of a linked wallet address, when that check is on (address only);
• Human Passport, Talent Protocol, Ethos — reputation scores you choose to connect on the Fair Play card (we send your wallet address; we store the score); and
• DEX Screener — public market data for a community's own token (we send the token's contract address, never anything about you).
• Vercel Analytics, and, where enabled, Google Ad Manager/AdSense — see §5.

If you win a sweepstake from a seller and a physical prize needs to be shipped to you, we share the shipping details you provide with that seller so they can fulfill it. We may also disclose information if required by law, subpoena, or to protect the rights, safety, or property of SHABANG or others.

We keep account and transaction information for as long as your account is active and as needed to satisfy tax, accounting, and legal recordkeeping obligations afterward. A winner's shipping address is cleared from active use once fulfillment reaches a terminal state (delivered, or the fulfillment window otherwise closes) — we don't keep it around indefinitely once it's no longer needed to get your prize to you.

We use Vercel Analytics to understand how the Service is used in aggregate. Where advertising is enabled on the Service, we (or our ad partners, currently Google) may use cookies or similar technology to serve and measure ads; a paying Member or Seller account never sees ads regardless. By using the Service you consent to this use of cookies/similar technology as described here; we do not currently offer a separate cookie-preferences control, and we'll update this section if that changes.

We use reasonable administrative and technical safeguards to protect your information, including restricting which parts of our system can read sensitive fields like your shipping address. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Sharing your device location is optional and only used to determine whether a local-pickup listing should be shown to you as available nearby. You can decline or revoke location permission at any time through your browser or device settings; doing so just means local-pickup-only listings won't be shown to you.

You can review and update your handle, avatar, and bio directly in your account settings at any time. For anything else — requesting a copy of the personal information we hold about you, correcting it, or requesting deletion of your account and associated data — email manager@greenlightning.biz from the email or phone number associated with your account. We'll verify your identity and fulfill eligible requests within a reasonable time. Some information (e.g. transaction records tied to a completed sweepstake) may need to be retained even after a deletion request, where we have a legal or accounting obligation to keep it.

If you are a California resident, you may have additional rights under the CCPA to know, delete, and opt out of the sale of personal information — as stated in §2, we do not sell personal information, and the same contact process above is how you exercise these rights.

We may update this Privacy Policy from time to time. If we make a material change, we will update the effective date above and, where practical, notify you in-app. Continuing to use the Service after a change takes effect means you accept the updated policy.

Shabang LLC — Florida, United States
Email: manager@greenlightning.biz