At LilBizee, your family's privacy matters deeply to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Because our platform is directed at children, we design it to align with the principles of the Children's Online Privacy Protection Act (COPPA) and other applicable privacy regulations, and we are actively building additional safeguards to meet amended COPPA requirements taking effect April 22, 2026.
1. Information We Collect
We collect the following categories of information:
- Account information: When a parent creates an account, we collect their name, email address, and password (managed securely by Clerk, our authentication provider).
- Kid profile information: Parents provide a display name and optional avatar selection for each Kid account. We do not collect real names, photos, or other personally identifiable information from children.
- Payment information:If you subscribe to a paid plan or enable sales on your kid's store, payment details are collected and processed by Stripe. We never store credit card numbers on our servers.
- Content: Product listings, blog posts, images, and other content uploaded by parents and kids.
- Usage data: We collect anonymized analytics data such as page views, session duration, and feature usage to improve the platform.
2. How We Use Information
We use the information we collect to:
- Operate and maintain the LilBizee platform.
- Process subscriptions and payments.
- Display kid storefronts and product listings to visitors.
- Send important account and service notifications (not marketing emails).
- Improve and develop new features based on aggregated usage patterns.
- Ensure platform safety and prevent abuse.
3. Children's Privacy
Protecting children's privacy is at the core of how we built LilBizee. We design the platform to align with the principles of the Children's Online Privacy Protection Act (COPPA), and we are actively working toward compliance with the amended COPPA rule that takes effect April 22, 2026.
- Parent or guardian account required: LilBizee requires a parent or guardian aged 18 or older to create an account and consent before any child account is created. Kid accounts are created and managed exclusively through the parent account; children cannot register independently. We are actively building enhanced verifiable parental consent mechanisms to meet amended COPPA requirements, and this Privacy Policy will be updated when those mechanisms are in place.
- Minimal data collection: We collect only the minimum information necessary for a Kid account to function, such as a first name or display name and an avatar selection provided by the parent. We do not ask children for last names, email addresses, phone numbers, or physical addresses.
- No direct communication: Kids cannot receive messages from buyers or other users. All customer communication is routed through the parent dashboard.
- No behavioral advertising:We do not serve ads to children and do not use children's data for advertising purposes.
- Parental access and control:Parents can review, edit, or delete information associated with their child's account at any time by emailing support@lilbizee.com (see the Parent Rights section below).
4. Data Storage & Security
We use industry-standard security measures to protect your data. Our infrastructure includes encrypted data transmission (TLS/SSL), encrypted data at rest, and regular security audits. User data is stored on secure servers in the United States.
While no system is 100% secure, we take reasonable and appropriate measures to protect the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction.
5. Third-Party Services
We use the following third-party service providers ("processors") to operate the platform. Each has its own privacy policy, and each only receives the information required to perform its function:
- Clerk(authentication): Receives the parent's email address, password, and session metadata to manage sign-in and account security. Kid accounts do not have their own Clerk identities. Clerk Privacy Policy
- Stripe (payments): Receives parent billing details and transaction data to process subscription payments and storefront sales. We never store credit card numbers on our servers. Stripe Privacy Policy
- Cloudinary(image storage and delivery): Stores and serves images uploaded through the platform, including child avatars and photos attached to product listings or blog posts. Images are served from Cloudinary's CDN. Cloudinary Privacy Policy
- Google Gemini(AI avatar generation): When a parent or child uses the AI avatar builder, we send the child's first name or display name and the avatar style selections to Google's Gemini API to generate an image. We do not send last names, contact information, or photos of the child to Gemini. Google Privacy Policy
- Resend(transactional email): Delivers account, notification, and support emails. Resend receives the parent's email address and may receive the child's first name or display name when it appears in the body of a notification (for example, a sale or activity alert). Resend Privacy Policy
- PostHog (analytics): Provides aggregate page view and feature-usage analytics. We configure PostHog defensively for our child users: we do not use cookies or persistent storage (memory-only sessions), we do not record sessions or replay user behavior, we do not auto-capture clicks, and we drop IP addresses before storage. Analytics is disabled entirely on the kid dashboard, kid login, and per-kid storefronts. PostHog Privacy Policy
We do not sell, rent, or trade your personal information or your child's information to any third party for marketing purposes.
6. Parent Rights
Parents and legal guardians have the right to review, correct, or delete the personal information we hold about their child at any time. To exercise these rights, email support@lilbizee.com from the email address associated with the parent account. We will verify the request and respond within 30 days. Parents may also:
- Request a copy of the data associated with their child's account.
- Request correction of inaccurate information.
- Request deletion of the child's account and associated data.
- Refuse to permit further collection or use of their child's information (which will result in deactivation of the Kid account).
7. Your Rights
Depending on your location, you may also have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your account and associated data.
- Object to certain types of data processing.
- Export your data in a portable format.
To exercise any of these rights, contact us at support@lilbizee.com. We will respond to requests within 30 days.
8. Data Retention
- Account data (parent profile, Kid profile, settings) is retained while the account is active.
- Child photos and uploaded imagesare deleted within 30 days of account deletion or at the parent's request. Images served from Cloudinary are purged from our Cloudinary account on the same schedule.
- Payment records (invoices, transaction history) are retained for 7 years to comply with tax and financial regulatory requirements.
- Analytics data is aggregated and is not tied to individual child accounts. Aggregate analytics may be retained indefinitely.
- Transactional email logs(delivery metadata from Resend) are retained according to Resend's standard retention windows and are not used for any purpose beyond delivery and abuse prevention.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
If you have questions or concerns about this Privacy Policy, or if you want to exercise your rights regarding your data or your child's data, please contact us at: