Tasha HQ ("we", "us", "the app") is a private, invite-only dashboard used by our team to manage our own creator business. This policy explains what the app processes, why, and the choices you have. It is written for the small number of named team members who are given a login code — the app is not a public service and does not offer sign-ups.
Only people we have personally issued an access code to (currently the account owner and a small number of team members). If you reached this page without a code, there is nothing here that collects information about you beyond the basics described under "Technical data" below.
The app runs on Cloudflare Pages. Third-party API keys are stored as encrypted server-side secrets and are never sent to the browser. Saved notes and settings are stored in Cloudflare storage bound to this project. Access is protected by an access code, optional 2-step verification, brute-force lockout, and standard security headers (HTTPS/HSTS, a Content Security Policy, and clickjacking protection).
We rely on a small number of processors purely to run the app: Cloudflare (hosting and storage) and the creator-platform APIs we connect to in order to read our own statistics. We do not sell personal data, and we do not share it for advertising.
Session cookies expire automatically. Notes and settings you enter remain until you or the account owner delete them. We keep data only as long as it is useful for running the business.
Because access is limited to named team members, you can ask the account owner at any time to show, correct, export or delete the information held about you. Depending on where you live you may also have rights under the GDPR or CCPA; we will honour valid requests.
We use one strictly-necessary cookie: the login session cookie. We do not use analytics, advertising, or third-party tracking cookies, so no cookie-consent banner is required for non-essential cookies.
Questions or requests about this policy or your data can be sent to admin@tashapaigee.com.
This policy is provided for transparency and legal-basics compliance. It is not legal advice; for a business handling sensitive data you may wish to have it reviewed by a professional.