Derm.com (“Derm”, “we”, “us”) is a creator-led skincare reference platform. This policy explains what we collect, how we use it, and what control you have over your data.
Information we collect
We keep the data set deliberately narrow.
- Account information. Email, name, and a hashed password.
- Creator profile. Handle, bio, credentials, social links, and the products you feature or include in routines.
- Usage signals. Page views, saved products, and attributed buy-link clicks. These power your dashboard and product improvements.
- Device and connection. IP address, browser type, and basic analytics signals.
- Cookies. Limited to the categories described in our Cookie Policy.
How we use it
- Run your account and creator page.
- Attribute buy clicks so creators can see what their audience shops.
- Detect abuse, fraud, and security incidents.
- Send account, security, and material product updates.
- Improve the product based on aggregate usage patterns.
Sharing
We do not sell personal data. We share a minimum necessary set with:
- Hosting, email, and analytics providers strictly to operate the service.
- Affiliate networks that record the attribution on tracked buy links.
- Law enforcement only when compelled by valid legal process.
Your rights
Depending on your region, you may have the right to:
- Access or export your account data.
- Correct or delete your account.
- Opt out of non-essential communications.
- Object to certain processing.
Email privacy@derm.com for any privacy request. We respond within 30 days.
Security
Passwords are hashed, connections are encrypted in transit (TLS), and internal access is scoped to the minimum necessary. No system is perfectly secure; if we learn of a breach affecting your account, we will notify you without undue delay.
Retention
We keep account and creator data while your account is active. When you delete your account, we remove personal data within 30 days, except where retention is required for legal, security, or accounting reasons.
Children
Derm is not directed to anyone under 16. We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will remove the account.
Changes
We may update this policy. Material changes are highlighted on this page and emailed to active accounts at least 14 days before they take effect.
Contact
Privacy questions, data requests, and complaints: privacy@derm.com.