Legal · Updated July 29, 2026

Privacy Policy

This Privacy Policy explains how Action2Unlock collects, uses, shares, and protects personal information when creators and visitors use our websites, accounts, public pages, unlock flows, browser extension, and related services.

This policy applies to information processed by Action2Unlock to operate the service. When a creator asks a visitor to submit information through an unlock flow, the creator may also determine why that information is collected. In that situation, the creator is responsible for its own privacy notice and lawful use of the information.

We collect information supplied when someone creates or manages an account, builds an unlock page, purchases a plan, contacts support, imports creator content, or otherwise uses creator features.

  • Account details such as name, username, email address, password credentials handled by our authentication provider, profile image, and social sign-in identifiers.
  • Creator content and settings such as profile details, links, destination URLs, unlock requirements, uploaded files, branding, visibility settings, and campaign configuration.
  • Billing records such as plan, purchase status, transaction identifiers, billing country, and payment status. Payment providers process full card or payment credentials.
  • Support and safety communications, including messages, reports, attachments, and information needed to investigate an issue.

When someone visits an Action2Unlock page, we may process information needed to deliver the page, record an unlock, prevent abuse, measure performance, and provide creator analytics.

  • Unlock and interaction events, including page views, requirement acknowledgements, unlocks, ad impressions, ad clicks, and timestamps.
  • Information a visitor knowingly submits, such as an email address, when the unlock page clearly requests it.
  • Device, network, and security data such as IP address, approximate country, region, or city, browser and device information, referrer, request logs, and fraud signals.
  • Cookie, local storage, session, and similar identifiers used for authentication, preferences, security, analytics, and advertising choices.

If you sign in with Google, Action2Unlock requests only basic account information covered by the openid, email, and profile scopes. This can include your Google account identifier, name, email address, and profile picture. We use it to authenticate you, create or connect your account, secure the service, and provide account features.

Action2Unlock does not use Google sign-in to read contacts, files, messages, calendars, or private social activity. We do not sell Google user data or use it for personalized advertising. You can revoke Google access through your Google Account and can delete your Action2Unlock account through Account Settings.

Google API Services User Data Policy

The Action2Unlock Companion supports transferring a signed-in creator's own transferable links from supported source platforms into that creator's signed-in Action2Unlock account. A migration starts only after the user explicitly selects the import action in the extension.

To request the user's own source-platform records, the extension may temporarily use the authenticated session context available in the source tab selected by the user. Depending on the source platform, this may involve processing a temporary session token in extension memory or making an authenticated same-origin request inside that selected tab. The extension does not access source-platform passwords. Source-platform session tokens and cookies are not sent to Action2Unlock and are not persisted by the extension.

The extension prepares a sanitized migration package that can contain source record identifiers and public slugs, titles, descriptions, destination URLs, thumbnail URLs, action types, action labels, action URLs, status values, and an export timestamp. This package is held temporarily in browser extension storage, delivered to the signed-in Action2Unlock import page, and deleted from extension storage after Action2Unlock acknowledges a successful import. Action2Unlock stores imported creator links and may copy eligible public thumbnails as part of the requested migration.

The extension uses browser storage, active-tab access, scripting, and limited website access permissions only to start the user-requested migration, read records from the selected signed-in source account, open the Action2Unlock handoff page, and deliver the sanitized package. It does not use imported data or browser activity for advertising, profiling, credit decisions, or sale to third parties.

We use information to provide and maintain the service, authenticate accounts, deliver protected destinations, import creator content at the creator's request, process purchases, provide analytics, respond to support, send transactional messages, enforce policies, detect abuse, investigate security events, comply with law, and improve reliability and usability.

Where data protection law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and protecting the service, consent, and compliance with legal obligations, as applicable.

Essential cookies and storage support sign-in, security, request integrity, account sessions, migration handoff, and saved privacy choices. Optional analytics or advertising technologies are used according to the choices presented in our consent controls where consent is required. Blocking essential technologies may prevent account, import, or unlock features from working.

We disclose information only as needed to operate the service or for the purposes described in this policy.

  • Service providers that support hosting, authentication, databases, storage, email delivery, payments, bot protection, analytics, advertising, browser-extension distribution, and customer support.
  • Creators, when a visitor knowingly submits information requested by that creator through an unlock flow.
  • Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce our policies.
  • A buyer, successor, or affiliated organization as part of a merger, financing, reorganization, or sale of all or part of the service, subject to appropriate safeguards.

Action2Unlock does not sell personal information. We do not share Google user data, browser-extension data, or imported creator content for advertising. If our advertising or analytics practices change in a way that creates additional rights under applicable law, we will update our disclosures and provide required choices before the change applies.

We retain information only as long as reasonably needed for the service, security, legal compliance, dispute resolution, and the purposes described here. Account access observations are generally retained for 90 days. Never-published creator accounts may be removed after they are at least 30 days old.

Pending migration packages are removed from extension storage after Action2Unlock acknowledges a fully successful import. Failed or abandoned packages expire after 24 hours and are purged on the next extension startup or interaction. Imported links become part of the creator's Action2Unlock account and remain until the creator deletes them or the account, subject to the retention rules in this policy.

Creators can schedule self-service account deletion from Account Settings. A scheduled deletion has a seven-day recovery period. After the displayed deadline, account data and uploaded files are permanently removed from active systems, subject to limited retention in backups, fraud records, billing records, or records required by law. Backup copies expire through normal rotation.

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, access controls, row-level database controls, audit logging, backups, and least-privilege access. No online service can guarantee absolute security. Keep your credentials confidential and report suspected unauthorized access promptly.

Action2Unlock and its service providers may process information in countries other than the country where it was collected. Where required, we use contractual and other safeguards intended to protect information during international transfers.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information, withdraw consent, or complain to a data protection authority. You can update common account details and schedule deletion from Account Settings. We may verify your identity before completing a request.

Contact privacy@action2unlock.com

Action2Unlock is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply where required by local law. If you believe a child provided information in violation of this section, contact us so we can investigate and delete it.

We may update this policy as the service or legal requirements change. We will revise the date above and provide additional notice when a material change requires it. Questions, requests, and privacy complaints can be sent to privacy@action2unlock.com or through our contact page.

Contact Action2Unlock