Privacy Policy — Countercard

Ava Research LLC · Last updated: October 23, 2026

This policy covers Countercard (the "Service"), a connector that builds and publishes one public page — links, socials, booking link, and contact info — for a business or creator, entirely through conversation with Muse. It applies whether you use the Service directly or through Meta's Muse.

What we store, and why

Account ID: an internal ID from your sign-in, used to keep your pages separate from everyone else's. Sign-in is handled by Microsoft Entra External ID with a one-time code sent to your email — there is no password, and it asks for nothing but your email address. The Service itself never stores your email address.
Your page content: handle, display name, bio, links and text blocks, socials, contact info, avatar image, and your chosen theme and accent — exactly what you say to build the page, both the private draft and, once you publish, the live version.
Click counts: a daily count per link, recorded only when someone follows a link on a published page. No visitor identity of any kind is recorded — no IP address tied to a person, no cookies beyond what's strictly necessary to serve the page, no fingerprinting, no third-party analytics.
Entitlement record: your plan status (Free or Pro) and renewal date, if you upgrade. No payment card or bank details are ever stored by Countercard — those are held entirely by Stripe, our payment processor, under its own privacy terms.

What we don't collect

The Service only stores the fields above. We don't ask for or store payment card or bank account numbers, government ID numbers, precise location, or health information. We never track who visits a published page — only the aggregate count of clicks each link receives.

Permissions Muse asks for

One permission, Countercard.ReadWrite: it lets Muse build, edit, publish, and manage your page and plan on your behalf.

How we use it

To build, store, and publish the page you describe.
To record and report the click counts for your own published links.
To activate and track your Pro entitlement, via Stripe.
To operate, secure, and improve the Service — including a heuristic scan of your page's content and link destinations at publish time, to catch obvious cases of phishing, malware, impersonation, illegal goods, or deceptive claims before a page goes live.

We do not sell your personal information, and we do not use it for advertising.

Published pages are public

Publishing makes your page public and indexable at its address — anyone with the link, or a search engine, can see it. Your draft stays private until you publish; you can unpublish at any time, which takes the page down immediately.

Who can see it

You, through your own account.
Anyone, for the content of a page you've chosen to publish.
Meta's Muse, if you connect it, acting on your behalf with the permission above.
Stripe, for payment processing only, if you upgrade to Pro.
Service providers that host and run the Service (Microsoft Azure, East US 2 region) and handle sign-in (Microsoft Entra External ID), bound by their own security and confidentiality commitments.
No one else. We don't sell, rent, or share your data with advertisers or data brokers.

How we protect it

Your account data is isolated by account — no one else's sign-in can read or edit your pages. Access to the underlying systems is limited to what each part of the Service needs to do its job, and administrative access is limited to Ava Research LLC personnel who need it to operate the Service.

Data retention

Page content and entitlement records: kept until you delete your data.
Click counts: kept in full for about 13 months, then rolled up into one running total per link rather than growing without bound.
A deleted handle is held for 30 days after deletion before anyone else can claim it — this prevents squatting on a name you just gave up, not a grace period to recover your own data.

Report a page

Every published page carries a "Report this page" link in its footer. A valid report is reviewed and, if it violates our content rules, taken down within one business day.

Delete your data

Deletion is self-service — ask Muse directly, no email required: "Delete all my Countercard data." This permanently removes every page record and draft, every click record, your plan record, and any stored image, and takes every live page down in the same operation. This can't be undone. Disconnecting Countercard from Muse stops Muse's access but doesn't delete your data — use self-service deletion first if you want it gone.

Children's privacy

The Service is not directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, for significant changes, make a reasonable effort to notify active users.

Contact us

Ava Research LLC
privacy@avaresearchllc.com