Your data, in plain English.

IndieHQ Awards (juried.is) is operated by Creative Bohemian LLC (“we”, “us”, “our”), an Oregon limited liability company at 15768 SW Bristlecone Way, Tigard, Oregon 97223. IHQ Awards is a product of Indie Agency News.

For the purposes of the GDPR, Creative Bohemian LLC is the Data Controller. For the purposes of the CCPA, Creative Bohemian LLC is the Business.

This Privacy Policy applies to the IndieHQ Awards platform at juried.is and any subdomains (e.g., top40pa.juried.is). If you use other Creative Bohemian properties — like indieagency.news or indiehq.com — separate privacy policies may apply to those services.

Account information. When you create an account, we collect your email address, your name, and (optionally) your agency, role, and mailing address. Authentication is handled by Clerk; if you sign in with Google or Apple, we receive the basic profile data those providers return.

Entry content. When you submit an entry, we store the material and metadata you provide: entry title, client name, location, credits, case narrative, category selection, and consents. We also store the media you upload (video, images, audio, documents, links).

Shipping details. If your entry wins a physical trophy or award, we store the recipient name, mailing address, and phone number you provide.

Payment information. Payments are processed entirely by Stripe. We never see, store, or handle your card number, CVC, or bank details. We do store the payment amount, currency, method type, timestamp, Stripe session ID, and a link to the payer’s user record for reconciliation and receipts.

Support conversations. When you use the “Ask a question” widget, we store your question, the page you were on when you asked, your name and email (if signed in), and any responses our team sends back.

Judge activity. If you serve as a judge, we store your scores, private notes, recusals, and any bio or expertise information you provide for the public judge roster.

Cookies and technical data. See the Cookies section below. We collect the minimum needed to authenticate you, remember your consent choices, and process payments. We do not run analytics, advertising, or cross-site tracking cookies.

We use your information to:

• Provide and maintain the Service (create your account, keep you signed in, accept and route entries).
• Process entry submissions, coordinate judging, and announce results.
• Bill you for entries and pack purchases via Stripe, and record those transactions for your receipts and our books.
• Respond to your support questions, notify you about your entries, and communicate about show cycles you’ve entered.
• Publish finalist and winning entries in accordance with our Terms of Service.
• Detect fraud, abuse, or violations of our Terms; protect the integrity of judging; comply with legal obligations.
• Improve the platform (bug reports, usage patterns visible to us via server logs).

Under the GDPR, we rely on these legal bases: performance of a contract (accepting your entry, delivering the Service), legitimate interests (fraud prevention, service improvement, promoting winning work), your consent (marketing communications where separate from transactional), and legal obligations (tax, accounting, response to lawful requests).

We do not sell your personal information. We do share specific information with the third-party services we use to operate the platform (“subprocessors”), each bound by their own privacy policies and data processing terms. Our current subprocessor list:

We may share information as required by law, in response to valid legal process, or to protect the rights, property, or safety of Creative Bohemian LLC, our users, or the public. If Creative Bohemian LLC is involved in a merger, acquisition, or asset sale, your information may be transferred; we’ll notify you before that happens.

We use a small set of cookies to keep the platform working. Our cookie consent banner (powered by CookieYes) lets you accept, reject, or customize what runs on your device, and you can revisit that choice any time via the cookie settings button in the corner of the site.

Strictly Necessary cookies keep you signed in (Clerk), remember your consent choice (CookieYes), process payments at checkout (Stripe), and provide bot protection (Cloudflare). These are always on because the platform can’t work without them; GDPR does not require consent for strictly necessary cookies.

Functional cookies handle video playback preferences (Bunny Stream) on entry pages that host case films. No personal data.

Analytics / Performance / Advertising: we do not currently run any cookies in these categories. If we ever add them, they’ll appear in the cookie banner first and require your consent.

We keep your data only as long as we need it for the purposes described in this policy:

• Account data: for as long as your account is active, plus a reasonable period after (typically 12 months) in case you return.
• Entry content: retained indefinitely as part of the historical record of each show cycle. Winning entries remain in the public archive permanently. Non-winning entries are retained internally for at least 7 years for audit and reference.
• Payment records: retained for at least 7 years to meet tax and accounting requirements.
• Support conversations: retained for 3 years, then archived or deleted.
• Judge notes: retained for at least 5 years for jury quality review.

You can request deletion of your account and personal data at any time by emailing us (see Your rights). Some information — particularly financial records, published entries, and content required by legal obligations — may need to be retained even after a deletion request.

We take reasonable steps to protect your information: TLS encryption in transit; access controls limiting who on our small team can see what; audit logging of admin actions; secure credential handling via Clerk; PCI-DSS-compliant payment processing via Stripe (we never touch card data). Our subprocessors are established vendors with their own security programs.

No system is 100% secure. We can’t guarantee absolute security, but if we ever learn of a breach that affects your data, we’ll act quickly. For breaches covered by the GDPR, we’ll notify the relevant supervisory authority within seventy-two (72) hours of becoming aware, and notify affected users without undue delay. For US and other jurisdictions, we’ll follow the notification timelines the law requires.

Creative Bohemian LLC operates from Oregon, United States. Some of our subprocessors process data in the United States, the European Economic Area, and other regions. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or another country whose data protection laws may differ from yours.

For transfers of personal data from the EEA, UK, or Switzerland to countries not deemed adequate, we rely on Standard Contractual Clauses or other lawful transfer mechanisms as appropriate.

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, restrict, port, or object to our use of it. Under the CCPA (California), you also have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising those rights.

How to exercise your rights. Email top40@indieagency.news with your request. We may need to verify your identity before responding. We’ll answer within 30 days (or 45 days under the CCPA, extendable to 90 with notice).

Do Not Sell / Do Not Share. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. There is nothing to opt out of on this platform.

If you’re in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

The Service is intended for users age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we’ll delete it.

Because we don’t run cross-site tracking, we effectively honor Do Not Track by default. There is no tracking to opt out of.

We may update this Privacy Policy from time to time. When we do, we’ll post the revised version on this page and update the effective date at the top. If we make material changes, we’ll notify you by email or a prominent notice on the platform.