Privacy Policy
Last updated
This policy explains what information the platform collects, why it collects it, and how you can have it removed. It covers influencers who publish a profile, brands who search and contact them, and visitors who browse without an account.
The platform is in early operation. This document describes current practice and will be updated as the service changes; the date above reflects the last revision.
Information you give us
When you create an account we collect your email address and the language you signed up in.
If you publish an influencer profile, we collect the information you enter: your Instagram handle, display name, biography, country and city, the languages you work in, your content categories, your posting frequency, your rate card, and a profile photo if you upload one.
We also collect the audience figures you enter yourself — follower count, reach, average likes, comments, shares and saves, and audience demographics. These are self-reported by you. We compute an engagement rate from the figures you provide; we do not accept that rate as a direct input.
If you represent a brand or an agency, we collect your account's email address and, if you enter them, your organisation's name, type (brand or agency), website and country.
Your organisation's name and type are shown to the creators you send a booking request to. Its website and country are shown only to the members of your organisation.
Connecting your Instagram account
You may connect your Instagram account to show a verified badge on your profile. This is used for one purpose: to confirm that the account you claim is genuinely yours.
We receive your Instagram account identifier and username from that connection, and we record that verification succeeded and when.
We do not retrieve your followers, engagement figures, posts, stories, insights, messages or any audience data from Instagram. The audience figures shown on your profile are the ones you entered yourself, and they are labelled as self-reported wherever they appear.
You can disconnect your Instagram account at any time. Doing so removes the verified badge and the stored connection.
Information that is public
A published influencer profile is public. It can be viewed by anyone, without an account, and it is indexed by search engines. This includes your handle, biography, location, content categories, self-reported audience figures, and your rate card including exact prices.
This is deliberate: public profiles are how brands find you and how you can share your own profile link. If you do not want this information public, do not publish a profile — you can keep it as a draft or unlist it at any time.
Your email address is never shown publicly.
Booking requests
When you send or receive a booking request, it contains: the services chosen from the creator's rate card, with their quantities, the prices shown at the time of sending and, where the rate card gives them, the delivery times; the total, in the creator's currency; the brief; a desired date, if one was given; and, for an agency, the name of the client brand it acts for, if one was given. We also record which member of the organisation sent it.
A request can be seen by the creator it is addressed to and by every member of the organisation that sent it.
Our team can see booking requests on the platform's administration pages, to run and supervise the service. These pages never show the brief, the creator's note, the client brand's name or any email address.
A request stays open for 14 days after it is sent. If the creator has neither accepted nor declined it by then, it closes automatically. While it is open, the organisation can withdraw it; the creator then sees that it was withdrawn.
A creator who declines a request chooses a reason and may add a note of up to 500 characters, which the organisation sees.
We keep the request's history: each change of status, when it happened and which account made it. The request's pages show only whether a change came from the organisation, the creator or the platform, never the name of a person.
Your account's email address is shared with the other party only once a request has been accepted. The creator then sees the email address of the account that sent the request (or, if that account no longer exists, of another member of the organisation), and the organisation sees the creator's account email address. Before acceptance, and for a request that is declined, withdrawn or expired, neither party sees the other's email address.
If a creator's account is deleted, the requests they received stay with the organisation that sent them, but without the link to the creator's profile, the brief or the creator's note, and the creator's email address is no longer shown. The organisation keeps the services, prices, dates, status history and, where there is one, the decline reason and the client brand's name; the request then reads “Deleted creator”.
Our security log records each change of status: the request, the account that made it, the old and new status, the decline reason if there is one, and the time. It never contains the brief, the note, the client brand's name, an organisation's name or an email address.
How we use your information
To operate the marketplace: to show your profile to brands, to let brands filter and find you, and to deliver booking requests between the two of you.
To verify identity: to confirm that a profile belongs to the person who claims it, whether through the Instagram connection or through a manual check by our team.
To contact you about your account, for example to confirm that a deletion you asked for is complete, or to reply to a message you sent us.
Who we share it with
We do not sell your personal information, and we do not share it with advertisers.
We use third-party providers to run the service: a database and file storage provider and a hosting provider. They process data on our instructions in order to operate the platform.
We may disclose information where we are legally required to do so.
Payments
The platform does not process payments. Any payment between a brand and an influencer is arranged and settled directly between them, off the platform. We do not collect or store card details or bank account details.
How long we keep it
We keep your account and profile information for as long as your account exists.
If you delete your account, we remove your profile and personal information. We may retain a limited record where we are required to for legal or accounting reasons, and we keep security and audit logs for a limited period.
Your choices
You can edit or correct your profile information at any time from your account.
You can unlist your profile, which removes it from public view without deleting your account.
You can request deletion of your account and associated data. Instructions are on our data deletion page.
Depending on where you live, you may have additional rights over your personal information, including rights of access and correction.
The search assistant
What the assistant does
For now, the assistant is reserved for our team.
On the search page, you can describe in a few words the creators you are looking for. An artificial-intelligence model, provided by an outside company, reads your request and picks the published profiles that match it. The information shown on each profile, including prices and audience figures, always comes from our database, never from the model.
The assistant only helps you find and compare creators. It contacts no one on your behalf, takes no payment and runs no campaign.
When no model is available, or the model does not give a usable answer, our own search engine answers instead. The answer is then labelled “Basic search”.
If no profile meets all your criteria, our search engine widens the search and shows the closest profiles, and says so.
What we send to the model
For each search, we send the provider:
- the text of your request;
- your earlier requests in the same conversation, only the most recent ones and within a short limit;
- the language of the page;
- for each published profile our search found: a temporary identifier (c1, c2…), the country, the city, the content categories, the audience languages, whether the account is verified, an audience-size bracket with no number, the main type of offer, and an excerpt of the creator's public bio (160 characters at most, with numbers and currency names removed).
We send nothing else.
What we never send
- your name, email address, account or organisation;
- your IP address or the assistant's cookie;
- creators' handles, names, prices, audience figures or contact details;
- profiles that are not published: drafts, profiles awaiting verification, or withdrawn ones.
The text you type is sent as it is. Do not include personal data, yours or anyone else's (name, phone number, email address…).
For creators
If your profile is published, the public details listed above (country, city, categories, audience languages, verified status, audience-size bracket, main type of offer, bio excerpt) may be sent to the provider when a brand runs a search that concerns you. Your handle, prices, audience figures and contact details are never sent to it.
Our providers and where processing happens
Groq, Inc., a company based in the United States, provides the assistant's models. Its contract forbids it to use requests and answers to train any model. We have turned on zero data retention at Groq: Groq keeps neither requests nor answers, only technical usage data that does not contain them. Processing may take place outside the European Union, in particular in the United States. This transfer is covered by the European Commission's standard contractual clauses, which are part of Groq's data processing agreement.
The servers that process your searches (Vercel, Dublin region) and our database (Supabase), where the log described below is stored, are located in Ireland, in the European Union.
The assistant's log
For each search, we record one line used to run and protect the assistant: the date and time, the page language, whether the search came from our team or the public, the provider and model used, how many models failed before the answer, how many calls were made to the models, the kind of provider failure if there was one (for example too many requests or an unusable answer), the volume of text processed (counted in “tokens”), the durations, how many items were shown and how many were set aside, whether the search had to be widened and on which kind of criterion, the reason for an answer with no results, the limit reached if any, and the outcome (answer, no results, basic search, limit reached, interrupted search or error).
This log never contains the text of your request, the text of the answer, or the creators shown.
It contains two fingerprints: one computed from the assistant's cookie, the other from your IP address (for an IPv6 address, from its prefix). A fingerprint is a code computed with a secret key: without that key, neither the cookie nor the address can be recovered from it, and the key stays on our servers. These fingerprints are used only to count searches, to apply the limits below.
Each line is deleted at the latest 14 days after the search.
The assistant's cookie
The assistant sets a cookie named asar_agent_sid. It holds a random identifier, unrelated to your account, and expires after 24 hours. It is sent only with the assistant's requests, and scripts on the page cannot read it. It is used only to apply the per-session search limits, for the security of the service and to prevent abuse. It is not used for advertising or audience measurement. Because it is strictly necessary for this purpose, it is set without asking for your consent.
The conversation state
So that the assistant can take your earlier requests into account, our server sends your browser a signed “conversation state” after each answer. It contains your recent requests, the temporary identifiers of the creators already shown together with the identifier of their profile on our platform, whether you asked to see verified creators only, and technical details (dates, number of exchanges). It is kept in the memory of the open page, without being saved on your device, and disappears when you close or reload the page, or start a new search. It expires after 30 minutes without activity, and at the latest 2 hours after the conversation began. It is signed so that no one can alter it, but it is not encrypted. We do not keep it on our servers and do not record it in any log.
Search limits
To protect the service, the number of searches is limited: 5 every 5 minutes and 30 a day for one session, 15 an hour and 60 a day for one connection. Beyond that, the assistant asks you to wait.
The link to the directory
If you follow the link to the directory that the assistant offers, the first words of your request (80 characters at most) appear in the page address. They then show in your browser history and in our host's technical logs.
Your rights
The assistant's log holds neither your name, nor your email address, nor your IP address in readable form, so we cannot find your searches in it. For any question about the assistant, write to us at the address given at the end of this policy.
Contact
For any question about this policy, or to exercise any of the rights above, contact us at ahmedzekri143@gmail.com.