Privacy Policy

1. Who is responsible for your data

The data controller is [TO CONFIRM], registered at [TO CONFIRM], registration number [TO CONFIRM]. Privacy contact: [TO CONFIRM].

If we appoint an EU representative or Data Protection Officer, their details will be listed here. [TO CONFIRM]

2. What we collect

Through the creator application form we collect:

• Professional/display name, email address, country of residence and preferred language
• Confirmation that you are 18 or older (a yes/no declaration — no ID documents)
• Creator platform and social media links you choose to share
• Information about your experience, niche (non-explicit categories), challenges, goals, services of interest and current representation
• An optional approximate monthly revenue range
• Your message, preferred contact method and, if chosen, a WhatsApp number or Telegram username
• Your consent choices and the time of submission

Through the contact form we collect your name, email, topic and message.

Through the brand briefing form we collect the brand or company name, its website (optional), the contact person's name and work email, the collaboration type, budget range, timeline and campaign description. Please do not include third parties' personal data in your brief.

We also process limited technical data needed to secure the site (for example a one-way hash of your IP address used for abuse prevention — we do not store raw IP addresses with submissions).

3. What we never collect through this website

Age and identity verification, where required, only happens later during onboarding through a secure, separate process.

• Passwords or login credentials for any platform
• Government ID documents, dates of birth or financial account details
• Photos, videos or any explicit content

4. Why we use it and our legal bases

Some information you choose to share (for example, the nature of your content niche) may be considered sensitive. Please share only what you are comfortable with; where special-category data is involved, we rely on your explicit consent and you may withdraw it at any time.

• To assess your application and take steps at your request before entering into an agreement — Art. 6(1)(b) GDPR (pre-contractual measures).
• To assess your brand's brief, find suitable talent and prepare a proposal and collaboration contract — Art. 6(1)(b) GDPR (pre-contractual measures) or, where you act on behalf of a company, our legitimate interest in responding to business enquiries, Art. 6(1)(f) GDPR.
• To contact you about your application, brief or message — your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.
• To keep the website and forms secure and prevent abuse — our legitimate interests, Art. 6(1)(f) GDPR.
• To measure website usage with analytics cookies — only with your consent, Art. 6(1)(a) GDPR.
• To comply with legal obligations where applicable — Art. 6(1)(c) GDPR.

5. Who we share it with

Application data is accessible only to the team members who review applications. We use service providers (processors) to operate the website and receive submissions — such as hosting, form-delivery/storage and email providers — under data processing agreements. Current providers: [TO CONFIRM].

Brief data is accessible only to the team that manages brand collaborations. To find suitable talent we may share campaign details, but not the contact details of the person who sent the brief, with the creators we represent, under confidentiality obligations. Those contact details are shared with a creator only once a collaboration moves forward and with the brand's knowledge.

We do not sell personal data and do not share it with platforms, advertisers or other agencies.

6. International transfers

Where data is transferred outside the EU/EEA or your country, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions. [TO CONFIRM]

7. How long we keep it

You can ask us to delete your application or brief at any time.

• Applications that do not proceed: deleted after [TO CONFIRM] (recommended: no longer than 12 months).
• Applications that lead to an agreement: retained as part of the client relationship under a separate notice.
• Contact messages: deleted after [TO CONFIRM] (recommended: 12 months).
• Brand briefs that do not proceed: deleted after [TO CONFIRM] (recommended: 12 months). Briefs that lead to a collaboration contract are retained as part of that business relationship.
• Security logs: kept for a short period strictly necessary for abuse prevention.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Have your data erased
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting earlier processing
• Lodge a complaint with your local data protection authority

To exercise these rights, contact [TO CONFIRM]. We will respond within the time required by applicable law (one month under the GDPR, extendable in limited cases). Residents of other jurisdictions — for example under Brazil's LGPD, Mexico's LFPDPPP, Argentina's Law 25.326 or Colombia's Law 1581 — have comparable rights, which we will honour. [TO CONFIRM]

9. Age requirement

This website and our services are intended only for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it promptly.

10. Security

Submissions are transmitted over encrypted connections (HTTPS), validated on our server and delivered only to access-controlled systems. We apply data minimization and limit access to people who need it. No method of transmission or storage is completely secure, but we work to protect your data appropriately.

11. Changes to this policy

We will update this policy when our practices change and indicate the date of the latest version at the top of this page.