Privacy Policy

What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include the following:

• Full name and display name
• Email address and password (stored securely via Firebase Authentication)
• Profile photo
• Company name, industry, and business description (brand accounts)
• Social media handles, usernames, follower counts, following counts, average likes, average comments, and average video views — collected from Instagram, TikTok, and YouTube via InsightIQ (see Section 4 below) when a creator chooses to connect their social accounts
• Bank account details including IBAN and beneficiary name (creator accounts — for payout processing only)
• Video content uploaded as campaign deliverables
• Campaign briefs, deal terms, and signed contract data
• In-app messages and communications between brands and creators
• Reviews, ratings, and reports submitted about other users
• Dispute details and resolution records

Payment Information. We facilitate payments between brands and creators via manual bank transfer. When you initiate a payment, we collect transaction reference numbers and confirmation details for record-keeping and dispute resolution. We do not store full payment card numbers on our servers. Where card payments are supported in future, they will be processed by Stripe, Inc., directly.

Sensitive Information. Bank account information (IBAN, beneficiary name, bank name) is collected from creator accounts solely to process payouts. This data is stored securely in Firebase and is accessible only to platform administrators for the sole purpose of releasing funds.

Information automatically collected

We automatically collect certain information when you use the Services, including:

• Device Data. Mobile device model, operating system version, unique device identifiers, and mobile network information.
• Push Notification Tokens. Device tokens used to deliver push notifications about deal updates, payments, messages, and disputes.
• Usage Data. Information about features used, screens viewed, and actions taken within the App, collected through Firebase Analytics.
• Log Data. IP address, access times, and error logs collected by Firebase for security and performance monitoring.

How Do We Process Your Information?

We process your personal information for the following purposes:

• Account creation and authentication. To create and maintain your account and verify your identity.
• Creator approval and verification. To review creator profiles for platform eligibility, including verifying social media handles.
• Deal facilitation. To match brands with creators, enable campaign creation, manage deal status, and generate contracts.
• Payment and payout processing. To track escrow payments, confirm bank transfers, and release payouts to creators after deal completion.
• Video deliverable management. To store, transmit, and enable review of video content uploaded by creators for brand approval.
• In-app messaging. To operate the direct messaging system between deal participants.
• Push notifications and alerts. To send you timely updates about deal progress, contract signing, payments, messages, and disputes.
• Reviews and ratings. To enable users to submit and display reviews after deal completion.
• Dispute resolution and platform moderation. To investigate disputes, review reports, and take appropriate action.
• Legal compliance. To comply with applicable laws and regulations in all relevant jurisdictions.
• Security and fraud prevention. To monitor for fraudulent activity, abuse, and violations of our Terms and Conditions.

When and With Whom Do We Share Your Information?

• Between brands and creators. When a deal is active, certain profile information is shared between the brand and creator parties. This information is only revealed after both parties have signed the deal contract.
• With platform administrators. Our admin team can access deal records, payment information, dispute details, user reports, and profile data as necessary to operate and moderate the platform.
• With service providers. We share information with third-party vendors that perform services for us, such as data storage, push notifications, and payment processing.
• Business transfers. We may share your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal requirements. We may disclose your information where required by law or in response to valid requests by public authorities.
• With your consent. We may disclose your personal information for any other purpose with your explicit consent.

Third-Party Services

Google Firebase (Google LLC). We use Firebase for user authentication, real-time database storage (Firestore), file storage (Cloud Storage), serverless cloud functions, and push notifications. Data is processed on Google's infrastructure. Firebase's privacy policy is available at firebase.google.com/support/privacy.

Stripe, Inc. Where supported currencies allow, we may use Stripe to process card payments. Stripe processes payment data directly and we do not store full card numbers on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Apple Inc. (Push Notification Service). We use Apple's Push Notification Service (APNs) to deliver push notifications to iOS devices. Apple's privacy policy is available at apple.com/legal/privacy.

InsightIQ (Social Media Data Provider). We use InsightIQ to enable creators to securely connect their social media accounts (Instagram, TikTok, YouTube) and share verified analytics data with brands on the platform. When a creator chooses to connect a social account through the I3lany app, InsightIQ facilitates the OAuth authentication with the relevant social platform and retrieves the following read-only data on our behalf:

• Username and public profile information (display name, bio, profile image)
• Follower count and following count
• Average engagement metrics (average likes, comments, and views per post) calculated from recent public content
• Account connection and verification status

This data is used solely to populate the creator's profile on I3lany so that brands can assess creator reach before initiating a deal. We do not use this data to post, comment, or take any action on behalf of creators on any social platform. Creators may disconnect their social accounts at any time through the I3lany app settings, which will remove the verified status from their profile.

InsightIQ processes social media data as a data sub-processor on our behalf. InsightIQ's privacy policy is available at insightiq.ai/privacy-policy. By connecting a social account on I3lany, you also agree to InsightIQ's terms of service available at insightiq.ai/terms-of-service.

Resend (email delivery). We use Resend to send transactional emails including account approval notifications, deal status updates, contract signing alerts, and payment confirmations. Resend processes your email address on our behalf. Resend's privacy policy is available at resend.com/legal/privacy-policy.

The Services are hosted and operated through Google Firebase infrastructure. If you access the Services from outside the United States, your data may be transferred to and processed in the United States and other countries where Google operates data centers, in accordance with Google's data transfer mechanisms and safeguards.

How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. Deal records, signed contracts, and payment history are retained for a minimum of five (5) years following deal completion or termination to comply with applicable commercial and financial regulations.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, because data has been stored in backup archives), we will securely store your information and isolate it from further processing until deletion is possible.

How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process, including:

• Firebase Authentication with secure email/password sign-in and session token management
• Firestore Security Rules enforcing role-based access control — brands, creators, and admins each access only the data they are permitted to see
• Encrypted data transmission via HTTPS/TLS for all communications
• Bank account (IBAN) information accessible only to platform administrators for payout processing
• Video deliverables stored in Firebase Cloud Storage with access restricted to deal participants

Despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at support@i3lany.me.

What Are Your Privacy Rights?

Depending on your location and applicable law, you may have the following rights:

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal information, subject to legal retention requirements
• Right to restriction — request that we limit our processing of your personal information
• Right to data portability — request a machine-readable copy of your personal information
• Right to object — object to our processing of your personal information under certain conditions

Account Information: You may update your profile information directly within the App at any time. To request account termination or deletion of your personal information, please contact us at support@i3lany.me.

Push Notifications: You may opt out of push notifications at any time by adjusting the notification settings on your mobile device.

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your browsing activity tracked. Because no uniform standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT signals. If a standard is adopted in the future, we will update this Privacy Policy accordingly.

Do We Make Updates to This Notice?

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised 'Last updated' date at the top of this page. If we make material changes, we may notify you by posting a prominent notice within the App or by sending you a direct notification. We encourage you to review this Privacy Policy periodically.

How Can You Contact Us About This Notice?

If you have questions or comments about this Privacy Policy, you may contact us at:

How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please submit a request to support@i3lany.me. We will respond to your request within 30 days.