Privacy policy

This policy explains what personal information Muchsy ("we", "us") collects when you use the Muchsy website and services (the "Platform"), why we collect it, who it is shared with, and the choices you have. It applies to visitors, businesses, creators, and to customers who claim or share a promo code.

For the purposes of the EU and UK General Data Protection Regulation, Muchsy is the controller of the personal information described here. We can be reached through the contact form on the Platform.

Information you give us when registering: your name, email address, password (stored only as a salted hash — never in readable form), your role (business, creator or customer), and your language preference.

Promo information, if you claim a promo code: which promo you claimed, which creator's or sharer's link you came through, the single-use code we issue you, when it was issued and when it expires, and — if you use it — the business that redeemed it and when. This is what lets your codes appear in one place and lets a business see how many customers a creator actually brought in.

Sharing information, if you share a promo link of your own: the link we create for you, the reward terms as they stood when you took it, how many codes were claimed and used through it, and — where you earn a reward — its code, the terms as they stood when it was earned, how many verified customers earned it, and whether it has been handed over at a counter, marked as paid by the business, or disputed by you.

Counter device information, if you are a business: the label you give each device you enrol to accept codes — which may name a member of your staff — when it was last used and how many times, and which device handled each redemption, so that a disputed redemption can be traced to a device rather than to an anonymous member of staff.

Profile information you choose to publish: business or display name, handle, headline and description, country, city and optional region, categories or niches, languages, links to your social profiles and website, self-declared audience figures, and any avatar or cover image you upload.

Collaboration information: the offers you publish or apply to, application messages, agreed deliverables and deadlines, stated values and any cash amounts and currencies, voucher redemption events, links to published content that you submit as proof, reviews you write or receive, and the resulting reliability metrics.

Messages you send us through the contact form, including your name, email and the content of your message.

Limited technical information needed to operate and protect the service: the IP address you registered from, the IP address and time of each successful sign-in and which method you used, and the IP address and time of security-relevant events such as failed sign-in attempts, rate limiting and password resets. This is used for rate limiting, for preventing and investigating abuse, and for answering disputes and lawful requests.

Where we have refused an account, a one-way cryptographic hash of the email address, so that the same address cannot simply register again. We do not keep the address itself, and the hash cannot be turned back into it.

We do not collect payment card details, bank details or government identification, because we do not process payments and do not verify identity documents.

We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

To provide the Platform — creating your account, publishing your profile and offers, matching businesses with creators, issuing and redeeming vouchers, recording collaboration outcomes and reviews. Legal basis: performance of a contract with you.

To keep the Platform safe — rate limiting, detecting automated abuse and fraudulent accounts, keeping a security log of events such as failed sign-ins, recording successful sign-ins so that a disputed or unauthorised use of an account can be investigated, and refusing registration to an address we have previously had to remove. Legal basis: our legitimate interest in protecting users and the service.

To communicate with you about your account and your collaborations — verification and password-reset emails, notifications when an application is accepted, a voucher is redeemed, a deadline approaches or passes, or a collaboration is completed, expired or recorded as a no-show. Legal basis: performance of a contract, and our legitimate interest in ensuring reputation changes are never silent.

To publish reliability metrics on public profiles. Legal basis: performance of a contract and our legitimate interest in operating a trustworthy marketplace; this is a core, disclosed function of the Platform.

To run promo codes — showing you the codes you have claimed and their status, and telling the business and the person whose link they came through how many codes were claimed and redeemed. We do not build interest profiles from where you shop, and we do not use this information to target advertising. Legal basis: performance of a contract with you.

To run share-and-earn — showing you your own share link and its results, working out when a reward has been earned on the terms you were shown when you took the link, and giving the business what it needs to hand that reward over or pay it. Legal basis: performance of a contract with you.

To comply with legal obligations and to establish, exercise or defend legal claims. Legal basis: legal obligation and legitimate interest.

We do not use your information for behavioural advertising, we do not build advertising profiles, we do not sell or rent personal information to anyone, and we do not make solely automated decisions producing legal or similarly significant effects about you.

Muchsy sets only strictly necessary cookies. These deliver a service you have actively requested, and the Platform cannot work without them: a session cookie that keeps you signed in, a security token that protects sign-in forms against cross-site request forgery, a short-lived cookie that returns you to the right page after logging in, a cookie placed on a device that a business has enrolled at its counter which records the one business that device may accept codes for, and — while the site is in pre-launch — a cookie that remembers you were given preview access.

None of these are used to profile you, none are shared with anyone, and none follow you to other websites. Strictly necessary cookies are exempt from consent requirements under the EU ePrivacy Directive as implemented in national law, the UK Privacy and Electronic Communications Regulations, Quebec's Law 25 and PIPEDA.

We use Vercel Web Analytics to count page views and see which pages people actually use. It is cookieless: it stores nothing on your device and reads nothing from it, it cannot follow you to other websites, and it does not build a profile of you. What we see is aggregate — which page, roughly which country, which browser, which site linked to us — never who you are.

Apart from that, we do not use analytics cookies, advertising or retargeting pixels, social media tracking widgets, session recorders, heatmaps, or A/B testing tools. No third party sets a cookie through the Platform.

Because nothing optional is stored on your device, you are not asked to accept cookies here — there is nothing to consent to.

If we ever introduce technology that stores or reads information on your device, or that follows you across other websites, it will be switched off by default, you will be asked before anything loads, and this section will be updated at the same time.

You can delete cookies in your browser at any time. Deleting the session cookie simply signs you out.

Your profile is public. Your display or business name, handle, headline and description, city, country, categories, links, self-declared audience figures, images, reliability metrics and the reviews you have received can be viewed by anyone, including people who are not registered, and may be indexed by search engines.

Offers you publish are public in the same way.

If you hold a customer account, you have no public profile. You do not appear in our public directories and nothing about you is indexed by search engines.

If you share a promo link, the name on your account is shown on that link's page to everyone who opens it, so that the people you send it to can see who it came from. That page is not indexed by search engines, but anyone the link reaches can read it.

A business — and any device it has enrolled at its counter — can see the name of each person promoting one of its offers, and how many codes were claimed and used through each of their links. We do not tell it who claimed or used a code.

Your email address is never shown publicly. It is disclosed to the other party only where necessary to carry out a collaboration, or to a business that owes you a sharing reward, so that it can hand that reward over or pay you — Muchsy never handles that money and cannot pass it on for you.

Application messages and collaboration details are visible to the other party to that collaboration, and to us where necessary to operate or support the service.

Consider carefully what you put in free-text fields. Anything you type into a public field is public.

We use a small number of service providers who process personal information strictly on our instructions and are bound to protect it: a cloud hosting and application platform that runs the Platform, serves it to your browser and provides the cookieless page-view measurement described in section 4; a managed PostgreSQL database provider that stores the data described above; and a transactional email provider that delivers verification, password-reset and notification emails.

We may disclose information where we are legally required to, to comply with a valid legal process, to enforce our Terms of Use, or where necessary to protect the rights, property or safety of our users, third parties or ourselves.

If the Platform is ever involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction. You will be notified, and any acquirer remains bound by this policy until you are told otherwise.

We do not sell, rent or trade personal information.

Muchsy is available worldwide and our service providers operate infrastructure in several countries, so your information may be stored or processed outside the country where you live, including in Canada, the United States and the European Union.

Where personal information is transferred out of the European Economic Area or the United Kingdom, we rely on an adequacy decision where one applies, or on Standard Contractual Clauses with the provider concerned.

We keep your account and profile information for as long as your account is open.

When you request deletion, your profile is hidden from public view immediately and your open offers are closed. Your personal information is erased after a grace period of thirty days, during which signing in again cancels the deletion. The grace period exists so that an accidental or impulsive deletion is recoverable.

Completed collaborations and reviews are kept after deletion in anonymised form, with your name replaced. This preserves the reliability record of the person you dealt with, which would otherwise be erasable by the other side simply closing their account.

Promo codes that were used at a counter, and sharing rewards that were handed over, are kept after deletion in the same way, with your name removed. They are the business's and the promoter's record that a real customer was served, which one side closing their account would otherwise erase. Codes you claimed but never used, and rewards you had not yet collected, are cancelled outright when your account is deleted.

We may delay erasure where the information is still needed to handle an open dispute, to comply with a legal requirement, or to establish, exercise or defend a legal claim — for example where a complaint about a collaboration, a payment or a sharing reward is unresolved, or where we have received a valid preservation request from a law enforcement or judicial authority. The delay lasts only as long as that reason does, and everything else in this section continues to apply in the meantime.

Security and rate-limiting records are kept only as long as needed for their purpose and are pruned automatically. Records of successful sign-ins are kept for twelve months, and are deleted outright when an account is erased.

Where we have refused a registration, the hashed form of that email address is kept for up to twenty-four months and is then deleted.

Contact-form messages are kept while we handle your enquiry and for up to twenty-four months after it has been handled. If you delete your account, the email address on any message you sent us is erased along with the rest of your information; the message itself is kept as the record of the enquiry.

Depending on where you live, you may have the right to access the personal information we hold about you; to have inaccurate information corrected; to have your information erased; to restrict or object to certain processing, including processing based on legitimate interests; to receive your information in a portable format; and to withdraw consent where processing is based on consent.

Much of this is available directly in the Platform: you can edit your profile at any time, and you can request account deletion from your settings. Creators can export a record of their completed collaborations.

To exercise any other right, contact us through the contact form. We will respond within the period required by applicable law, and we may need to verify your identity before acting on a request.

If you are in the European Economic Area or the United Kingdom you have the right to complain to your local data protection authority. If you are in Quebec you may contact the Commission d'accès à l'information; elsewhere in Canada, the Office of the Privacy Commissioner of Canada. We would appreciate the chance to address your concern first.

Passwords are stored only as salted hashes and are never recoverable in readable form. Traffic to the Platform is encrypted in transit. Uploaded images are re-encoded on receipt, which also strips embedded metadata such as camera and location data.

We apply rate limits to sensitive endpoints, log security-relevant events, and invalidate existing sessions when a password is changed so that a password reset locks out anyone who had access.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities where the law requires it.

We may update this policy. The date at the top of this page shows when it last changed, and we will take reasonable steps to notify registered users of material changes.

For any question about this policy or about your personal information, use the contact form on the Platform.