Legal

Privacy Policy

Last updated June 12, 2026

Template prepared by AI — have counsel review before launch. This document is a draft based on Paisley’s actual data practices and is not legal advice.

See also our Terms of Service.

This Privacy Policy explains how Paisley (operated by Kamase Labs Inc., “Paisley,” “we,” “us”) collects, uses, shares, and protects personal information when you use the Paisley browser, our website, and our advertising marketplace (together, the “Services”). It is written to be transparent about what we actually do — including the single first-party analytics cookie we set and the third-party providers who process data on our behalf.

Paisley is the browser that pays you a share of ad revenue for keeping it open with a small bottom ad ticker. To run that model we operate a two-sided marketplace: consumers who earn, and advertisers who pay to show plain-text ads.

1Information we collect

We collect the following categories of personal information:

  • Identifiers & account data — your first name, last name, email address, and a password (handled by our authentication provider; we never store your password in readable form). For advertisers, a company name and billing contact email.
  • Internet & device activity — engagement events such as page views and clicks on our website and in the product, your browser user-agent string, and an anonymous identifier cookie (paisley_aid) described in Section 6.
  • Financial & payout data — for consumers, the payout and identity-verification information you provide directly to our payments processor (Stripe) to receive your earnings, and your accrued earnings and ad-impression history. For advertisers, prepaid budget and payment details processed by Stripe. We do not store full card numbers.
  • Inferences — limited engagement metrics derived from the above to attribute earnings, prevent fraud, and improve the product.

We do not intentionally collect special categories of sensitive data, and Paisley is not directed to children under 18.

2How we use your information

  • To create and operate your account and the earn/payout relationship.
  • To calculate, attribute, and pay out your share of ad revenue, and to bill advertisers.
  • To serve and measure the plain-text ads shown in the product.
  • To detect and prevent fraud and abuse (for example, artificial inflation of ad impressions) — a core requirement of operating the payout program responsibly.
  • To send transactional communications (account, confirmation, and payout emails).
  • To analyze and improve the Services, and to comply with legal, tax, and accounting obligations.

Where required (for example, for users in the EU/UK), our legal bases are: performance of a contract (operating your account and paying you), legitimate interests (analytics, security, fraud prevention), consent (non-essential cookies), and compliance with legal obligations (tax reporting).

3How we share information — our service providers

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. Our ads are served by bid rank, not by selling user profiles. We disclose personal information only to the following service providers (sub-processors), each under a data processing agreement, for the business purposes shown:

  • Supabase — authentication and database. Stores account data (including hashed credentials), engagement events, campaigns, and earnings.
  • Stripe— payments and payouts. Processes advertiser payments (Stripe Checkout) and consumer payouts (Stripe Connect), including identity verification (KYC) and tax form filing (see Section 5).
  • Vercel — hosting and serverless functions. Processes request data such as IP address and user-agent to serve the website and APIs.
  • Resend — transactional email delivery (account, confirmation, and payout notifications).
  • Google (Gemini) — where AI features are used, limited data may be processed to power those features. We do not use these providers to sell your data.

We may also disclose information to comply with law, enforce our Terms of Service, or in connection with a merger or acquisition (with notice).

4Data retention

We keep personal information only as long as needed for the purposes above: account and earnings data for the life of your account and as long as required afterward for tax, accounting, fraud-prevention, and legal obligations; engagement events for a limited analytics window; and payout/tax records for the period required by law (generally several years). You can request deletion as described in Section 7; some records must be retained where the law requires it.

5Payouts, identity verification, and tax

To pay consumers, we use Stripe Connect. When you set up payouts you provide identity and bank information directly to Stripe, which performs identity verification (KYC). Your earnings may be reportable income, and Stripe and/or Paisley may issue a tax form (such as a 1099) if you cross the applicable threshold. You are responsible for any taxes on your earnings; Paisley does not provide tax advice. See the Consumer Terms for details.

6Cookies & tracking

Paisley uses a small number of first-party cookies. We do not use third-party advertising or cross-site tracking cookies.

  • paisley_aid — a first-party analytics cookie (a random identifier, valid for one year, SameSite=Lax). It lets us attribute engagement that happens before you sign up to your account afterward, so your earnings start correctly.
  • paisley_cookie_consent — records your choice from the cookie notice (essential to honor your preference).
  • Authentication cookies set by our login provider, which are strictly necessary to keep you signed in.

Because this analytics cookie is first-party and we do not transfer the data to third parties, it is generally neither a “sale” nor a “sharing” under California law. You can decline non-essential cookies in the notice we show on first visit, and we honor Global Privacy Control (GPC) browser signals as a valid opt-out.

7Your privacy rights

Depending on where you live, you may have the right to:

  • Know and access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information (subject to legal retention).
  • Receive a portable copy of your information.
  • Opt out of any sale or sharing of personal information — note that we do not sell or share.
  • Limit the use of sensitive personal information — note that we do not collect it for these purposes.
  • Not be discriminated against for exercising these rights.

EU/UK users may additionally withdraw consent at any time and lodge a complaint with their supervisory authority. Because our providers are US-based, international transfers are made under appropriate safeguards such as Standard Contractual Clauses.

To exercise any right, email privacy@paisleybrowser.com. We will verify your request and respond within the time required by law.

8Security

We use industry-standard safeguards, rely on row-level security in our database, and never store passwords or full card numbers in readable form. No system is perfectly secure, but we work to protect your information and limit access to it.

9Changes & contact

We may update this Policy; we will revise the “Last updated” date and, for material changes, provide additional notice. Questions? Contact privacy@paisleybrowser.com.