Privacy Policy
Last updated 7 June 2026
Who we are
CosBuild, operated by Lucas Viegas Ruiz Inoi de Oliveira (Dubai, United Arab Emirates), runs this website, where fans buy access to fan-made cosplay build tutorials. This Privacy Policy explains what information we collect and how we use it.
For EEA/UK data-protection purposes, Lucas Viegas Ruiz Inoi de Oliveira is the controller of personal data collected through CosBuild, unless otherwise stated.
What we collect
We may collect:
- account email and login/account details;
- buyer purchase records, tutorial access records, library records, and refund/support records;
- creator profile information, such as display name, bio, profile image, and social links;
- creator private payout information, such as legal name, country, payout method, payout account details, and payout history;
- tutorial submission information, files, images, videos, materials lists, tools lists, steps, and related metadata;
- basic technical information needed to run and secure the site, such as IP address, device/browser information, session cookies, logs, and similar data;
- communications you send to CosBuild.
We do not collect your card details directly. Buyer payment details are handled by Lemon Squeezy in Version A. CosBuild does not collect ID documents or tax IDs at MVP unless required later for payment, tax, compliance, fraud-prevention, or legal reasons.
How we use it
We use your information to:
- create and run your account;
- deliver tutorials you buy;
- show your buyer library;
- review creator applications and tutorials;
- publish creator profiles and tutorials;
- calculate and make creator payouts;
- process refunds, support requests, disputes, and takedowns;
- keep the platform safe and prevent misuse, fraud, piracy, and abuse;
- send essential emails, such as account, purchase, approval, publishing, payout, refund, and support notifications;
- comply with legal, tax, accounting, payment-provider, and platform obligations.
Legal bases for EEA/UK users
If you are in the EEA or UK, we rely on these legal bases under the GDPR / UK GDPR:
| What we use your information for | Legal basis |
|---|---|
| Account creation, login, and tutorial access | Contract |
| Buyer purchases, libraries, refunds, and support | Contract |
| Creator applications, publishing, and payouts | Contract |
| Fraud prevention, platform safety, abuse prevention, and security | Legitimate interests |
| Accounting, legal records, tax records, and compliance | Legal obligation |
| Takedowns, disputes, and policy enforcement | Legitimate interests / legal obligation |
| Essential service emails | Contract / legitimate interests |
| Marketing emails | Consent, where required |
Who we share it with
We share information only as needed to run CosBuild and provide the service, including with:
- Supabase for database, authentication, storage, and backend services;
- Lemon Squeezy for buyer checkout, merchant-of-record payment processing, taxes, receipts, refunds, and payment support;
- Stripe if used for future payment processing or testing;
- Resend or similar email provider for transactional emails;
- Vercel or similar hosting provider;
- analytics/security tools if added later;
- professional advisers, payment providers, banks, authorities, or rights holders where needed for legal, tax, accounting, payment, dispute, takedown, or safety reasons.
We do not sell your personal information.
Cookies and sessions
We use cookies and similar technologies that are necessary to keep you signed in, secure your account, remember sessions, and operate the site.
If CosBuild adds analytics, advertising, retargeting, or non-essential cookies later, the cookie notice and consent flow should be updated where required.
How long we keep it
We keep your information only as long as needed for the purposes above. As a guide:
| Data | How long we keep it |
|---|---|
| Account data | While your account is active |
| Purchase and access records | 5 years, or as required for tax/accounting |
| Creator payout records | 5 years, or as required for tax/accounting |
| Tutorial content and metadata | While published and as needed for buyer access, disputes, takedowns, or records |
| Support requests | 2–3 years |
| Takedown/dispute records | 5 years, or as needed to protect rights and records |
| Data from deleted accounts | Deleted or anonymised unless we must keep it for legal, accounting, tax, security, fraud-prevention, dispute, or takedown reasons |
Retention set to 5 years to align with UAE record-keeping minimums; the “or as required” wording extends it where tax/accounting law requires longer.
Your rights
You can ask to access, correct, update, or delete your personal information. If you are in the EEA or UK, you may also have rights to object, restrict processing, request portability, and complain to a data-protection authority.
To make a request, contact hello@cosbuild.com. We may need to verify your identity before responding. Some information may be kept where required for legal, tax, accounting, security, fraud-prevention, dispute, takedown, or platform-integrity reasons.
Age
Creators must be at least 18. CosBuild is not directed at children, and we do not knowingly collect personal information from children.
International transfers
Because CosBuild uses international service providers, your information may be processed in countries other than your own. Where required, CosBuild will rely on appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.
Changes
We may update this Privacy Policy. Material changes will be shown by a new version or date.
Contact: hello@cosbuild.com