Last updated: July 6, 2026
We collect the following categories of personal data:
Account Data
When you register, we collect your name, email address, and authentication credentials (stored as a hashed password). If you sign up with Google OAuth, we receive your name and email from Google.
Profile Data
Depending on whether you set up a creator or business profile, we collect the information you provide, such as display name, bio, niche or category, location, avatar/logo images, website, base rate, collaboration preferences, portfolio entries, listings, and proposal templates.
Social Media Data
When you connect a social media account (e.g., Instagram, TikTok, YouTube, Twitter/X) for verification, we retrieve your handle or username and your follower/subscriber count. We use this solely to verify your metrics, assign a creator tier, and display verified status to other users. We do not access your private messages, contacts, or post content. We do not post on your behalf without your explicit action.
Usage Data
When you use the Service, we automatically collect information about your interactions, including pages viewed, features used, messages sent, proposals and offers submitted, device type, browser type, IP address, timestamps, and other log data. This helps us operate, secure, and improve the Service.
We use your personal data to:
We use cookies and similar tracking technologies (e.g., web beacons, local storage) to authenticate your session, remember your preferences, and gather analytics about how the Service is used. Cookies are small data files stored on your device when you visit a website.
For detailed information about the specific cookies we use, how long they persist, and how to manage or disable them, please review our Cookie Policy. You can also control cookies through your browser settings; however, disabling cookies may affect certain features of the Service, such as staying logged in.
We may use session recording and analytics technologies to record and replay user interactions on our website. These tools capture data such as mouse movements, clicks, scrolls, navigation paths, and page content as you interact with the Service. We use this information to improve usability, diagnose technical issues, and enhance our services.
Session recordings and analytics data are not linked to your identity unless combined with account data you provide. For more information about the analytics tools and tracking technologies we use, see our Cookie Policy.
If you are a resident of the European Economic Area (EEA) under the GDPR or a California resident under the CCPA, you have the right to opt out of session recording. To exercise this right, please contact us before using the Service and we will disable recording for your session. You may also block recording scripts via browser extensions or "Do Not Track" signals, which we respect.
We do not sell your personal data. We share your data with third-party service providers and processors only as necessary to operate the Service. These processors are bound by contractual obligations to protect your data and use it only on our behalf. Our current third-party processors include:
We may also disclose your data if required to do so by law, court order, or government regulation, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
Information you choose to display on your public creator or business profile — such as your display name, bio, niche, verified follower counts, tier, avatar, location, portfolio, and listings — is visible to other users and visitors of the Service. You are responsible for the information you choose to make public. Be mindful not to share sensitive personal data in public fields.
We retain your personal data for as long as your account is active. When you delete your account, we remove or anonymize your profile data, listings, proposals, messages, and other user-generated content within a reasonable period, typically within 30 days, except where retention is required by law, to resolve disputes, or to enforce our agreements. Social media tokens used for verification are disconnected immediately upon account deletion or when you disconnect a social account.
Usage data and log data may be retained for a longer period for security, fraud prevention, and analytics purposes, in an anonymized or aggregated form where possible.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us. We will respond to your request within 30 days. We may need to verify your identity before acting on your request.
If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). The legal bases on which we process your data include: (a) your consent; (b) performance of a contract (providing the Service you requested); (c) compliance with legal obligations; and (d) our legitimate interests in operating and securing the Service.
In addition to the rights listed in Section 8, you have the right to lodge a complaint with your local data protection authority. If you believe we have not complied with the GDPR, you may file a complaint with the supervisory authority in your jurisdiction.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Under these laws, you have the right to:
To exercise your CCPA rights, please contact us. We will verify your identity before processing your request and respond within the timeframes required by California law.
The Service is not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you are under 18, you must not create an account or use the Service. If we learn that we have collected personal data from a user under 18, we will delete that data promptly. If you believe we have collected information from a child under 18, please contact us so we can take appropriate action.
We take reasonable technical, organizational, and administrative measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.
Your personal data may be processed and stored in countries other than your own, including the United States. Where we transfer data from the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
This Privacy Policy and any disputes arising out of or related to it shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law provisions, regardless of your location.
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date above. If we make material changes, we will notify you through the Service or by email. Your continued use of the Service after the effective date of any revised policy constitutes your acceptance of the updated policy.
If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us. We are committed to addressing your inquiries promptly and transparently.
We use cookies for authentication and analytics, and may record sessions to improve the platform. See our Privacy Policy.