Privacy Policy
What we collect, what is public, and what is never shown to anyone until you choose to reveal it.
What is public
For approved creators, the following appear on a public profile page and on directory listings: display name, profile photo and cover image, bio, state, district, city, languages, categories, content formats, collaboration types, social handles and links, follower and engagement figures, and ratings received from brands.
What is never public
These fields are treated as private and are not rendered on any public page, nor included in the HTML source of any public page, nor returned by any public endpoint:
- Phone number, WhatsApp number, email address and any alternate contact
- Your rate range — used only to decide which campaigns notify you
- Date of birth
- Verification documents or proof supplied during review
Contact fields are encrypted at rest. They are disclosed at exactly one moment: when a connection is accepted. The disclosure is always mutual — the other party's details are revealed to you at the same time yours are revealed to them.
What we collect and why
- Account details (name, email, WhatsApp number) — to create your account, verify it, and let an accepted counterparty reach you.
- Profile details — to list you in the directory and match you to campaigns.
- Social account data — follower and subscriber counts, fetched from public APIs, to let brands filter by reach.
- Messages — stored so both sides have a record; screened automatically for external links and phone numbers before a connection is accepted.
- Usage events — pages viewed, searches run, requests sent, to understand and improve the discovery funnel.
Verification
A human reviewer opens the social accounts you list to confirm the profile is genuine. WhatsApp numbers are not verified by code in Phase 1; they are checked manually during that review. Every verification decision is logged with the reviewer and the reason.
Notifications
We send web push notifications and email for campaign matches, requests, accept and decline decisions, and new messages. Email mirrors every push. You can set a minimum budget, filter categories, turn barter offers off, or mute everything.
Third parties
Transactional email is sent through an email service provider. Google Sign-In is offered as a login method. YouTube subscriber counts are read from the YouTube Data API. Analytics are collected via Google Analytics and Google Search Console, plus our own event log. We do not sell personal data, and we do not share contact details with anyone other than an accepted counterparty.
Your choices
- Edit or correct any profile field at any time from your dashboard.
- Change or mute notifications at any time.
- Request deletion of your account and personal data by writing to us; the public profile is removed and the URL returns HTTP 410.
Retention
Profile data is kept while your account is active. Verification logs and connection records are retained after deletion in anonymised form, because they are part of the audit trail for ratings that other users rely on.
Contact
For any privacy question or a deletion request, contact Blue Bolt Global.