Privacy Policy

1. Data we collect

All users

• Name and email address (on registration)
• IP address and browser information (automatically)
• Communications sent through the Platform

Creators (additional)

• Display name, bio, location, and profile image
• Social media handles, follower counts, engagement rates, and profile URLs
• Portfolio content (images, links, descriptions)
• Rates, collaboration preferences, and deal-breakers
• Contact details including phone number and contact email
• Home address
• Date of birth
• Special category data: gender identity and ethnicity — provided voluntarily to support diversity and inclusion matching

Brands (additional)

• Company name, website, and description
• Campaign details including briefs, budgets, and timelines

2. Special category data

We collect gender identity and ethnicity from creators on an entirely voluntary basis. This data is used only to help brands who are specifically seeking to work with underrepresented creators, and to support the Platform's core purpose of increasing diversity in brand partnerships.

You can choose "Prefer not to say" for either field and this will have no impact on your use of the Platform. You may update or remove this data at any time from your profile settings.

The legal basis for processing this data is your explicit consent, given when you complete onboarding. You may withdraw this consent at any time.

3. How we use your data

We use your data to:

• Create and manage your account
• Display your profile to relevant brands (creators) or creators (brands)
• Facilitate messaging and campaign applications between users
• Send transactional emails (account verification, campaign notifications, invitations)
• Improve the Platform and understand how it is used
• Comply with legal obligations

We do not use your data for automated decision-making that produces legal or similarly significant effects, except for automated profile completeness checks which determine whether your profile is shown in discovery. These checks are based on objective criteria (profile completeness) and not on any personal characteristic.

4. Legal basis for processing

5. Who we share your data with

We do not sell your personal data. We share data only in the following circumstances:

• Other users: Creator profiles are visible to registered brand accounts. The level of visibility depends on your profile settings.
• Service providers: We use third-party providers to operate the Platform including database hosting, image storage (Vercel), and email delivery. These providers process data on our behalf under data processing agreements.
• Legal requirements: We may disclose data where required by law, court order, or to protect the rights and safety of our users.

6. Data retention

We retain your personal data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 30 days, except where:

• We are required by law to retain it for longer (e.g. financial records)
• It is necessary to resolve an open dispute or enforce our Terms

Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your personal data ("right to be forgotten").
• Restriction: Ask us to stop processing your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent (including special category data), you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority (e.g. the ICO in the UK).

8. Cookies

We use only strictly necessary cookies required to operate the Platform, including session cookies for authentication. We do not use advertising or third-party tracking cookies.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are hashed and never stored in plain text. Access to personal data is restricted to authorised personnel only.

10. International transfers

Some of our service providers may process data outside of your country of residence. Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

11. Children

The Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has registered, we will delete their account and associated data promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact

For any questions, data requests, or complaints, contact our data controller at:

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
[CONTACT EMAIL]