Privacy Policy

1. Who this policy covers

This policy applies to representas.com, Representas accounts, creator and brand profiles, campaign and messaging tools, and communications with us. “Representas”, “we”, “us” and “our” refer to the platform operator. Privacy enquiries can be sent to privacy@representas.com.

2. Information we collect

Account and technical information

• Name, email address, account role, verification status and authentication/security records.
• IP address, device, browser, access logs, approximate location derived from network information, and security or diagnostic events.
• Support enquiries, feedback, reports and communications with us.

Creator information

• Display name, biography, image, location, languages, website, contact details and profile preferences.
• Where provided: date of birth, residential address, gender, ethnicity, body type, values and collaboration preferences. Some of this may be sensitive information under Australian law.
• Social handles, profile URLs, follower counts, engagement rates, audience information, rates and availability.
• Portfolio images, links, descriptions and collaboration history.

Brand, campaign and platform activity

• Company, agency, website, industry, logo, description and representative details.
• Campaign briefs, budgets, dates, applications, invitations, proposals, deliverables, notes, shortlists and reviews.
• Messages and other content exchanged through the platform.

3. How we collect information

We collect information directly from you when you register, build a profile, upload content, communicate or use a feature. We also collect information automatically when you use the service, and from other users where they invite, review, shortlist or communicate with you.

You may provide social-media information or links. We do not claim that information from linked third-party services is controlled by this policy; those services apply their own privacy terms.

4. Why we use information

• Provide, personalise and administer accounts, profiles, discovery, campaigns, applications, messaging, reviews and notifications.
• Review creator applications, calculate profile completeness and maintain marketplace quality.
• Enable users to assess potential collaborations and manage agreed work.
• Authenticate users, prevent fraud, enforce our Terms and protect people and the platform.
• Provide support, send service messages and respond to privacy or legal requests.
• Measure performance, diagnose faults and improve features.
• Comply with law and establish, exercise or defend legal claims.

Where consent is required, including for certain sensitive information or optional marketing, you may withdraw it. Withdrawal does not affect earlier lawful processing but may limit features that depend on that information.

5. Profile visibility and sensitive information

Creator profiles and portfolio content may be visible to approved brand or agency users and, for public profile features, to anyone with the relevant link. Contact, residential, birth-date and account-security information is not intended for public display.

Diversity and identity details are voluntary unless clearly stated otherwise. We use them to support creator self-description, relevant discovery and inclusion goals. We do not sell this information. You can update or remove optional details in your profile or ask us for assistance.

6. Automated and assisted decisions

The platform uses rules and software to calculate profile completeness, apply filters, order results, detect limits or misuse, and route users through review and approval states. Creator approval may include human review. These processes may affect profile visibility or feature access but are not intended to make legal or similarly significant decisions about you. You may contact us if you believe a result is incorrect.

7. When we disclose information

• Other users: as needed for profiles, discovery, applications, campaigns, messaging, deliverables and reviews.
• Infrastructure providers: hosting, database, authentication, file storage, email, security and support providers, including Supabase, Vercel and Cloudflare where relevant to the feature used.
• Professional advisers and authorities: where reasonably necessary for advice, compliance, safety, fraud prevention or legal claims.
• Business transfers: in connection with a genuine financing, restructure, merger or sale, subject to confidentiality and applicable law.
• With your direction or consent.

We do not sell personal information or allow third parties to use it for their own unrelated advertising.

8. Overseas disclosure

Our service providers may store or process information outside Australia, including in the United States and other countries where their infrastructure or personnel operate. Locations can change as providers update their services. We take reasonable steps appropriate to the circumstances to select reputable providers and protect information, but overseas recipients may be subject to different privacy laws.

9. Cookies and similar technology

We use cookies and local storage required for authentication, security, preferences, onboarding drafts and core service operation. We also use Google Analytics to understand how the site is used — which pages people visit, how they arrived and how the service performs. It sets its own cookies and processes data on Google’s infrastructure overseas, as described in section 8. You can opt out across all sites using Google’s browser add-on, or by blocking analytics cookies in your browser. We do not use advertising or cross-site tracking; if we introduce it, we will update this policy and provide choices where required.

10. Security and data breaches

We use reasonable technical and organisational safeguards such as managed authentication, access controls, encryption in transit, restricted administration, audit records and security monitoring. No online service is completely secure, so keep credentials confidential and notify us promptly of suspected misuse.

Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible breaches and notify affected people and the Office of the Australian Information Commissioner when required.

11. Retention and deletion

We retain information while your account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent abuse and meet legal, accounting or security obligations. Account deletion removes associated profile and platform records according to the deletion workflow, subject to backups, audit records, de-identified information and lawful retention. Backup copies may remain until overwritten through normal cycles.

12. Access, correction and choices

You can view or update much of your information in account settings. You may ask for access to personal information we hold, request correction, withdraw consent, opt out of marketing, or request account deletion. We may need to verify your identity and may refuse or limit a request where permitted by law; if so, we will explain why where required.

Send requests to privacy@representas.com. We will respond within a reasonable period.

13. Complaints

Email privacy@representas.com with enough detail for us to investigate. We aim to acknowledge complaints promptly and provide an outcome within 30 days where practical. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

14. Children

Representas is intended for people aged 18 and over. We do not knowingly permit children to create accounts. Contact us if you believe a child has provided personal information.

15. Changes to this policy

We may update this policy to reflect changes to our practices, providers or law. We will publish the updated version and effective date and provide additional notice where changes are material.

16. Contact

Privacy enquiries, requests and complaints: privacy@representas.com. You may request a copy of this policy in an accessible alternative format.