Privacy Policy

Effective Date: March 16, 2025
Last Updated: March 16, 2025

This Privacy Policy explains how twosided.io, owned and operated by Firm Firm, LLC ("we", "our", "us"), collects, uses, and protects personal data when you use our services.

By using twosided.io, you consent to this Privacy Policy.

1. Who We Are

twosided.io is a marketplace analytics tool that integrates with Stripe Connect. We are owned and operated by:

Firm Firm, LLC
1111B S Governors Ave STE 29674
Dover DE 19904
United States
info@twosided.io

We host all user data in Frankfurt, Germany on EU-based servers.

2. What Data We Collect

We collect the following categories of data:

a) Account Information

• Name, email address, password (hashed), company details

b) Stripe Connect Data

• With your permission, we access connected account data via Stripe’s API

• This may include marketplace transactions, charges, transfers, and customer IDs

• We do not store sensitive cardholder data

c) Usage Data

• Analytics data (e.g. pages visited, feature usage)

• Device/browser type, IP address, timestamps

d) Partner Data

• Sharetribe data (e.g. marketplace ID)

3. How We Use Your Data

We use your data to:

• Provide and operate the Service

• Analyze usage to improve features

• Communicate with you (e.g., updates, support)

• Fulfill legal and security obligations

We do not sell your data.

4. Data Sharing

We may share your data only in these limited cases:

• With Stripe, under your authorization

• With trusted service providers who help us run our infrastructure (e.g. hosting, analytics)

• If required by law or legal process

5. Data Hosting and Security

All data is hosted in Frankfurt, Germany, within the European Union.
We follow industry best practices including:

• Encrypted database storage

• TLS for all network connections

• Strict internal access controls

6. Your Rights (GDPR & Global)

If you are a user in the EU or similar jurisdiction, you have the right to:

• Access your personal data

• Correct or delete your data

• Object to or restrict processing

• Request data portability

To make a request, email us at info@twosided.io

7. Retention

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion at any time.

8. Cookies & Tracking

We use minimal cookies for authentication and analytics. We do not use third-party advertising cookies.

A full cookie policy is available at [Insert link or say “upon request”].

9. International Users

If you access the Service outside of the EU, be aware that your data may be transferred to and processed in the EU (Frankfurt data center). By using the Service, you consent to this transfer.

10. Children’s Privacy

Our service is not intended for individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice.

12. Contact Us

For questions, concerns, or data requests, contact:

Firm Firm, LLC
1111B S Governors Ave STE 29674
Dover DE 19904
United States
Email: info@twosided.io