1. Introduction

This Privacy Policy ("Policy") describes how CHEETAY ("Company," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website located at cheetayhq.com, our GRID platform, and all related services (collectively, the "Services"). CHEETAY is based in Pakistan.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with the terms of this Policy, you should not access or use the Services.

2. Information We Collect

We collect the following categories of personal information in connection with the provision of our Services:

Account Registration Information. When you create an account or subscribe to a membership plan (Creator Pro at $24.99/month), we collect your full name, email address, and payment information. All payment credentials are processed directly by Stripe, Inc. and are never stored on our servers (see Section 4 below).

Profile and Content Data. Information you voluntarily provide through the GRID platform, including but not limited to: profile details, posts, comments, check-in responses, content submissions for coaching review, and any other user-generated content shared within the community.

Social Media Analytics Data. With your authorization, we may access publicly available analytics and performance data from your Instagram, TikTok, and/or YouTube profiles. This data is used exclusively to provide coaching insights, track your content performance, and deliver the Services. We collect only publicly available information and metrics associated with your social media accounts.

Usage and Technical Data. We automatically collect certain technical information when you access the Services, including: device type, browser type and version, operating system, IP address, pages viewed, features accessed, session duration, and interaction patterns within the GRID platform.

Communication Data. Records and content of communications you send to us, including support requests, feedback, and correspondence via email or other channels.

3. How We Use Your Information

We process the personal information described above for the following purposes:

• To provide, maintain, and improve the Services, including the GRID platform, live coaching sessions, session library, and community features.
• To process your membership subscription and manage your account, including authentication, billing, and plan management.
• To deliver personalized content coaching based on your social media analytics and submitted content.
• To facilitate community features, including the social feed, member directory, and progress tracking.
• To send transactional communications related to your account, such as membership confirmations, session reminders, password reset emails, and billing notifications.
• To monitor and analyze usage trends and patterns in order to enhance the user experience and develop new features.
• To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, and to protect the security and integrity of the Services.
• To comply with applicable legal obligations, resolve disputes, and enforce our agreements.

4. Payment Processing

All payment transactions are processed through Stripe, Inc. ("Stripe"), a PCI-DSS Level 1 certified payment processor. When you subscribe to a membership plan, your payment card details are transmitted directly to Stripe's servers via their secure, encrypted payment form. CHEETAY does not receive, process, store, or have access to your full credit card number, debit card number, or bank account details at any time.

We retain only a limited set of payment metadata provided by Stripe for record-keeping purposes, including: the last four digits of your card, card brand (e.g., Visa, Mastercard), expiration date, billing country, and transaction identifiers. For further information on Stripe's data practices, please refer to Stripe's Privacy Policy.

5. Third-Party Services

In order to operate and deliver the Services, we engage the following third-party service providers, each of which may process certain personal information on our behalf and in accordance with their respective privacy policies:

• Stripe, Inc. — Payment processing and subscription management. Stripe processes all payment card data in compliance with PCI-DSS standards.
• Supabase, Inc. — Database hosting, user authentication, and backend infrastructure for the GRID platform.
• Vercel, Inc. — Web application hosting, deployment, and content delivery for all CHEETAY web properties.
• Discord, Inc. — Supplementary community communication and member coordination.
• Google Drive — Hosting and delivery of live coaching session recordings and related materials.
• PostHog, Inc. — Privacy-focused product analytics on our public-facing landing pages (see Section 7).

We require all third-party service providers to maintain appropriate security measures and to process personal information only as necessary to perform the services they provide to us.

6. Data Sharing and Disclosure

CHEETAY does not sell, rent, lease, or trade your personal information to third parties for their own marketing or commercial purposes. We may disclose personal information only in the following limited circumstances:

• Service Providers. We share information with the third-party service providers identified in Section 5, solely to the extent necessary for them to perform services on our behalf.
• Legal Compliance. We may disclose personal information if required to do so by applicable law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, personal information may be transferred as part of the transaction, subject to applicable data protection requirements.
• With Your Consent. We may share information with third parties when you have provided explicit consent to such sharing.

7. Cookies and Tracking Technologies

CHEETAY employs a minimal approach to cookies and tracking. Our use of such technologies is limited to the following:

• Essential Session Cookies. We use strictly necessary cookies to maintain your authenticated session, preserve your preferences, and ensure the proper functioning of the Services. These cookies are required for the operation of the platform and cannot be disabled.
• PostHog Analytics. We utilize PostHog, a privacy-focused analytics platform, on our public-facing landing pages (e.g., cheetayhq.com) to understand visitor behavior and improve our marketing pages. PostHog collects anonymized usage data and does not use third-party advertising cookies.

We do not use third-party advertising trackers, retargeting pixels, or cross-site tracking technologies. We do not participate in behavioral advertising networks or sell data to advertisers.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including but not limited to:

• Right of Access. You may request a copy of the personal information we hold about you.
• Right of Correction. You may request that we correct any inaccurate or incomplete personal information.
• Right of Deletion. You may request that we delete your personal information, subject to certain legal exceptions (e.g., where retention is required for compliance with legal obligations or resolution of disputes).
• Right to Object. You may object to the processing of your personal information in certain circumstances.
• Right to Data Portability. Where applicable, you may request a portable copy of your personal information in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us at shayaan@cheetayhq.com. We will respond to all legitimate requests within thirty (30) days or such shorter period as required by applicable law.

9. Data Retention

We retain your personal information for as long as your membership remains active and for a reasonable period thereafter, as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements.

Upon cancellation of your membership, you may request deletion of your personal information by contacting us at shayaan@cheetayhq.com. Upon receipt of a verified deletion request, we will delete or anonymize your personal information within thirty (30) days, except where retention is required by applicable law or for legitimate business purposes (e.g., fraud prevention, financial record-keeping).

Certain aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for analytical and operational purposes.

10. Children's Privacy

The Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of thirteen (13). If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete such information from our records. If you believe that a child under 13 has provided us with personal information, please contact us immediately at shayaan@cheetayhq.com.

11. Changes to This Policy

We reserve the right to modify or update this Privacy Policy at any time at our sole discretion. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (such as by posting a notice on the GRID platform or sending you an email notification). Your continued use of the Services following the posting of any revised Policy constitutes your acceptance of such changes. We encourage you to review this Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CHEETAY
Pakistan
Email: shayaan@cheetayhq.com
Website: cheetayhq.com