Privacy Policy

1. Who We Are

IBOHero is a platform operated by Deskless Workers INC("IBOHero," "we," "us"). This Privacy Policy explains how we collect, use, and share personal information across our website, mobile applications, and related services (the "Service").

The Service is offered in the United States only and is not directed to individuals in the European Economic Area or the United Kingdom. We do not target or offer the Service to individuals outside the United States.

2. Scope and Roles

• For individuals who create an IBOHero account (including Independent Business Owners, or "IBOs"), IBOHero is the business responsible for their account and identity information.
• Where an organization (such as a direct-selling company) provisions access for its affiliated IBOs and uploads its own data, IBOHero acts as that organization's service provider and processes that organization's data on its behalf under a separate agreement; the organization's own privacy notice governs its collection practices.

3. Information We Collect

3.1 Information you provide

• Account and profile information (name, email, username, business/profile details).
• Content you create or upload (blog posts, landing pages, product information, images).
• Contacts and leads you manage through the Service.
• Payment information you provide to our payment processor (we do not store full card numbers).
• Support communications.

3.2 Information collected automatically (first-party analytics)

On the web: when you visit our public pages, we set a first-party random visitor identifier in your browser's local storage (persistent for approximately one year) and fire a first-party analytics pixel to our own domain. We record page views, product clicks, page URL, referrer, UTM parameters, and a session identifier. We do not collect your IP-based precise location, device fingerprints, or cross-site identifiers through this pixel, and we do not use third-party analytics or advertising trackers.

In the mobile apps: we collect first-party engagement and usage data — screen views, in-app actions (such as publishing a blog or post), session identifiers, app version, and platform — and crash and diagnostic data (error messages and stack traces) to operate, secure, and improve the Service. We associate these with your account identifier. We do not use this for tracking across other companies' apps or websites, and we do not use advertising identifiers.

3.3 Information from third parties

If you connect a social account (e.g., Facebook, Google, Apple, X, LinkedIn, Pinterest), we receive authentication information and, where you direct it, content you choose to import or share.

4. How We Use Information

We use personal information to:

• provide, operate, secure, and support the Service;
• generate, display, and distribute the content you create;
• provide analytics and engagement metrics to you and, where applicable, to the organization that provisioned your access (these metrics are a core part of the Service);
• send transactional messages and, where permitted, newsletters and marketing you can opt out of;
• create de-identified and aggregated data to analyze, improve, and develop the Service and our products and models (we do not attempt to re-identify this data); and
• comply with law.

We do not use your identifiable personal information to train our models; model development uses de-identified data only.

5. Analytics, Cookies, and Your Choices

Our analytics are first-party. We use a local-storage visitor identifier and a first-party pixel on our own domain, plus first-party in-app engagement measurement, to understand how content performs and to power the analytics we provide to IBOs and organizations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or use it for targeted advertising. Because we do not sell or share personal information in these senses, the "Do Not Sell or Share My Personal Information" opt-out — and the Global Privacy Control browser signal, which applies to that opt-out — do not apply to our first-party analytics. Our analytics are also necessary to provide the paid Service (the engagement metrics IBOs and organizations purchase), so they operate as a core Service function.

You can still control the following:

• Marketing email: unsubscribe using the link in any marketing message.
• Push notifications: manage in your device settings; push is opt-in.
• Account data: access, correct, or delete as described in Section 8.

6. How We Share Information

We share personal information only with:

• Service providers/subprocessors who process it on our behalf to run the Service (hosting, AI inference, identity, email, payments, analytics infrastructure, push). Our current subprocessors are listed on our subprocessor page.
• The organization that provisioned your access, for its affiliated IBOs, as part of the Service (e.g., field analytics).
• As required by law or to protect rights, safety, and the integrity of the Service.
• In a business transfer (merger, acquisition, or sale of assets).

We do not sell personal information or share it for cross-context behavioral advertising.

7. Data Retention, Deactivation, and Deletion

We keep personal information for as long as your account is active and as needed to provide the Service, then delete or de-identify it as described here.

• Deactivate (Pause): you can deactivate your account to hide and retain your data and content, and restore it by signing back in. Deactivation is reversible.
• Delete: you can delete your account. We tombstone the account and hide your content immediately, retain it for a limited recovery period (generally around 30 days) during which you can recover it, and then permanently delete your personal information and authored content through our systems without undue delay. Routine backups age off on our ordinary rotation cycle.
• Username: we may permanently reserve a deleted account's username to prevent impersonation; a reserved username is not linked to your deleted account information.
• If your affiliation with an organization ends: your account is deactivated and you are notified; your published content may remain live for a limited period (generally up to approximately 90 days) and is then unpublished and deleted without undue delay, unless you reactivate or delete sooner.

8. Your Privacy Rights

Depending on your U.S. state of residence, you may have the right to:

• Know/Access the personal information we hold about you;
• Delete your personal information;
• Correct inaccurate personal information; and
• Not be discriminated against for exercising these rights.

Because we do not sell or share personal information for cross-context behavioral advertising, and do not use sensitive personal information for purposes that require a limitation option, the sale/share and sensitive-information opt-outs do not apply to our practices.

How to exercise your rights. You (or an authorized agent) can submit a request by emailing dev@ibohero.ai. To protect your information, we verify your control of the account email before fulfilling a request, and may require you to sign in and re-authenticate for deletion or full data-access requests. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, with notice. You can access much of your information directly in your account, and can delete your account in-app at any time.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and processing within the United States. No method of transmission or storage is completely secure.

10. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under 18. If we learn we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Policy. We will update the "Effective Date" and, for material changes, provide notice through the Service or by email. For app users, we may re-prompt acceptance through the app.

12. Contact