Privacy Policy

1) Scope

This Policy applies to personal information we collect about users of the Platform, including brands, creators, and visitors. It covers information collected online and through our support channels.

2) Information We Collect

• Account and Profile: name, email, password (stored securely), profile details (bio, niches, pricing, country), business details, and settings.
• Verification: identity, business, or tax information where needed to verify your account and comply with legal or risk requirements.
• Transactions and Orders: order details, pricing, and status; limited payment and payout metadata processed via our third‑party payment service provider (we do not store full card or bank details on our servers).
• Communications: messages, briefs, and content shared through the Platform; inquiries to support.
• Device and Usage: IP address, device identifiers, browser type, pages viewed, referring/exit pages, and timestamps to maintain security and improve the Platform.
• Cookies and Similar Technologies: we use cookies and similar tools for authentication, security, preferences, analytics, and performance. You can control cookies via your browser settings.
• Social Connections (optional): if you connect a professional Instagram account, we collect read‑only profile and insights data permitted by the scopes you approve (e.g., username, followers count, media count, audience and media insights). Tokens are stored server‑side and not exposed to client devices.

3) How We Use Personal Information

• Provide and operate the Platform, including onboarding, discovery, messaging, and order workflows.
• Facilitate payments, payouts, receipts/invoices, and account‑level financial records.
• Display creator analytics and insights where a creator has connected a professional account.
• Personalize features, improve user experience, and conduct analytics to enhance the Platform.
• Verify identity, prevent fraud, enforce policies, and ensure platform integrity and safety.
• Communicate with you about your account, updates, and service announcements.
• Comply with law and respond to lawful requests from authorities.
• With your consent, send marketing communications—you may opt out at any time.

4) Disclosing Personal Information

• Payment service providers to process payments and payouts.
• Hosting, analytics, email, and customer support providers.
• Identity verification and risk/anti‑fraud service providers.
• Content moderation and security partners to protect the Platform and users.
• Other users to the extent needed to fulfill orders (e.g., profile/brief/order details).
• Government or law enforcement where required by law, court order, or to protect rights and safety.
• Business transfers (e.g., merger, acquisition), in which case this Policy will continue to apply or you will be notified of material changes.

5) International Transfers

We may store and process information in New Zealand and other countries. Where we disclose personal information overseas, we take reasonable steps to ensure that the recipient is subject to privacy laws that provide comparable safeguards to the Privacy Act, or we put in place appropriate contractual protections.

6) Security

We implement technical and organizational measures designed to protect personal information, including encryption at rest for sensitive tokens and access controls. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7) Retention

We retain personal information for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain limited records (e.g., invoices, logs) after account closure where legally required or for legitimate business purposes, then delete or anonymize data in accordance with our retention schedules.

8) Your Rights

• Access: request confirmation and access to your personal information.
• Correction: request correction of personal information you believe is inaccurate.
• Deletion: request deletion where appropriate (subject to legal/record‑keeping obligations).
• Objection/Marketing: opt out of direct marketing communications at any time.
• Instagram Connection: you can disconnect access at any time; we will cease further retrieval and remove tokens except where retention is required by law or for security and audit.
• To exercise these rights, use the support options in your account or contact us using the details below. We may need to verify your identity before responding.

9) Cookies and Tracking

We use cookies and similar technologies to operate and improve the Platform. You can adjust your browser settings to refuse or delete cookies; some features may not function properly without cookies.

10) Children

The Platform is intended for individuals 18 years and older. We do not knowingly collect personal information from persons under 18. If you believe a child has provided us information, please contact us and we will take appropriate steps to remove it.

11) Contact Us

For questions or to exercise your privacy rights, contact us via the support options in your account or email our team. If we cannot resolve your concerns, you may contact the Office of the Privacy Commissioner in New Zealand. See their guidance and complaint process at privacy.org.nz.

12) Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via the Platform or email where feasible. Continued use after changes take effect constitutes acceptance of the updated Policy.

For related terms governing your use of the Platform, please see our Terms & Conditions.