Privacy Policy

1. Introduction

Agencymo Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform and services.

This policy applies to all users of the Agencymo platform, including creators, brands, and visitors. By using our Service, you consent to the data practices described in this policy.

2. Data Controller

Agencymo Ltd (England and Wales) and Agencymo FZ LLC (Dubai Free Zone, currently in incorporation) are joint data controllers for the personal information processed through the platform.

Data Protection Officer: Francesca Canon
Contact: contact@agencymo.uk

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Social media handles, follower counts, biographical details
• Payment Information: Bank account details, PayPal email, tax information
• Campaign Data: Content submissions, performance metrics, communications
• Identity Verification: Age verification, government-issued ID (when required)

3.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, click patterns, device information
• Technical Data: IP address, browser type, operating system, screen resolution
• Cookies & Tracking: Session cookies, authentication tokens, analytics data

3.3 Information from Third Parties

• Social Media: Public profile data from Instagram, TikTok, YouTube when you connect accounts
• Payment Processors: Transaction confirmations from Stripe, PayPal
• Authentication Providers: Login data from Google OAuth (if used)

4. How We Use Your Information

We process your personal data for the following purposes:

• Service Delivery: Create and manage your account, facilitate creator-brand collaborations
• Payments: Process payments to creators and invoices from brands
• Communication: Send campaign briefs, notifications, updates, and support responses
• Platform Improvement: Analyze usage patterns, fix bugs, develop new features
• Security: Detect fraud, prevent abuse, enforce Terms of Service
• Legal Compliance: Meet tax obligations, respond to legal requests
• Marketing: Send promotional emails about platform features (you can opt out)

5. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: Necessary to provide services you've requested
• Legitimate Interests: Platform security, fraud prevention, service improvement
• Legal Obligation: Tax compliance, response to lawful requests
• Consent: Marketing communications, optional cookies (you can withdraw anytime)

6. How We Share Your Information

We do not sell your personal data. We may share your information with:

6.1 Service Providers

• Clerk: Authentication and user management
• Supabase: Database hosting
• Vercel: Website hosting and infrastructure
• Stripe/PayPal: Payment processing
• Analytics Tools: Google Analytics (when implemented) for usage insights

6.2 Campaign Partners

When you collaborate with a brand, we share relevant information (name, contact details, content submissions) necessary to execute the campaign. Brands are contractually obligated to protect your data.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United Kingdom, United Arab Emirates, and United States. We ensure appropriate safeguards are in place:

• UK/EU to US: EU-US Data Privacy Framework, Standard Contractual Clauses
• UK/EU to UAE: Approved data transfer mechanisms under GDPR
• Encryption: Data in transit is encrypted using TLS/SSL

8. Data Retention

We retain your personal data for as long as necessary to provide services and comply with legal obligations:

• Active Accounts: Data retained while account is active
• After Account Deletion: Most data deleted within 30 days; some retained for legal/financial purposes (e.g., tax records for 7 years)
• Campaign Data: Retained for duration of campaign plus 2 years for dispute resolution
• Analytics Data: Aggregated, anonymized data may be retained indefinitely

9. Your Privacy Rights

Depending on your location, you have the following rights:

9.1 UK/EU (GDPR) & California (CCPA) Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure ("Right to be Forgotten"): Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Opt out of direct marketing or processing based on legitimate interests
• Withdraw Consent: For processing based on consent, you can withdraw at any time

9.2 How to Exercise Your Rights

To exercise any of these rights, contact us at contact@agencymo.uk. We will respond within 30 days (or as required by applicable law).

9.3 Right to Complain

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO)
• EU: Your country's supervisory authority
• US (California): California Attorney General

10. Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS/TLS for data in transit, encryption at rest for sensitive data
• Access Controls: Role-based access, multi-factor authentication for admin accounts
• Monitoring: Automated security scanning, intrusion detection
• Vendor Security: Our service providers (Clerk, Supabase, Vercel) maintain SOC 2 compliance

However, no system is completely secure. If you believe your account has been compromised, contact us immediately.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, contact us immediately, and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the platform. The "Last Updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Data Protection Officer: Francesca Canon
Email: contact@agencymo.uk
Website: agencymo.uk