Privacy Policy

Last updated: July 17, 2025

1. Introduction

Sheep It ("we", "us", "our"), operated by Santiago Sánchez (Sole Proprietor), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at sheepit.io (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Data Controller: Santiago Sánchez (Sole Proprietor)

Business Address: Pedro Berro 1238, Montevideo, 11300, Uruguay

Contact Email: santiago@sheepit.io

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Email address, name, username, and profile information
  • Product Information: Product names, descriptions, URLs, logos, and other product details
  • Payment Information: Processed through our third-party payment providers (we do not store credit card details)
  • Communications: Information in emails or messages you send us
  • User Content: Comments, votes, and other interactions with the Service

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

  • Usage Data: Pages viewed, links clicked, features used, and time spent on pages
  • Device Information: IP address, browser type, operating system, and device identifiers
  • Cookies and Similar Technologies: We use cookies to enhance user experience and analyze usage
  • Log Data: Server logs that record access times, referring URLs, and error reports

2.3 Information from Third Parties

We may receive information about you from:

  • OAuth Providers: When you sign in using Google or other authentication services
  • Analytics Services: Aggregated demographic and interest data
  • Public Sources: Publicly available information about products and makers

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process product submissions and manage the weekly launch cycles
  • Send you newsletters (with your consent) featuring weekly winners
  • Process payments and prevent fraudulent transactions
  • Respond to your comments, questions, and customer service requests
  • Send you technical notices, updates, and security alerts
  • Monitor and analyze trends, usage, and activities
  • Personalize and improve your experience
  • Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

4.1 Public Information

Product information you submit (name, description, logo, website) is publicly visible on our platform. Your profile information may also be publicly visible based on your settings.

4.2 Newsletter Partners

If your product wins, we share product information with our newsletter partners (50,000+ subscribers) for promotional purposes.

4.3 Service Providers

We share information with third-party vendors who perform services for us:

  • Supabase (database and authentication)
  • Payment processors (Stripe/LemonSqueezy)
  • Email service providers (Resend)
  • Analytics providers
  • Cloud storage services

4.4 Legal Requirements

We may disclose information if required to do so by law or if we believe such action is necessary to:

  • Comply with legal obligations or respond to lawful requests
  • Protect and defend our rights or property
  • Prevent fraud or protect against security risks
  • Protect the safety of users or the public

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or uses of your personal information.

5. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records for analysis and/or audit purposes

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information through your dashboard. You may also request a copy of your personal data by contacting us.

7.2 Email Communications

You can opt out of promotional emails by clicking the unsubscribe link in any email or updating your email preferences in your account settings. Note that you may still receive transactional emails.

7.3 Cookies

Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may limit your ability to use certain features of our Service.

7.4 Data Deletion

You can request deletion of your account and personal data by contacting us. We will delete your information except where we need to retain it for legal or legitimate business purposes.

7.5 Data Portability

You have the right to request your data in a structured, commonly used, and machine-readable format.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete that information promptly.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and share
  • Right to delete personal information (with some exceptions)
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

11. European Privacy Rights

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Our legal basis for processing your information is typically your consent, contract performance, or legitimate interests.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Sheep It Privacy Team

Data Controller: Santiago Sánchez (Sole Proprietor)

Address: Pedro Berro 1238, Montevideo, 11300, Uruguay

Email: santiago@sheepit.io

Website: https://sheepit.io

For data protection inquiries or to exercise your rights, please email us with "Privacy Request" in the subject line. We will respond to your request within 30 days.