Privacy Policy

Template — to be completed by the site owner. Highlighted fields are placeholders. Have this page reviewed by a lawyer before launch. This is not legal advice.

Last updated: [date]

1. Controller

[Name / company, address, email]. Data protection contact: [email].

2. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in the EU. A data processing agreement (Art. 28 GDPR) is in place [confirm]. Server log files (IP address, time, URL, user agent) are processed to operate and secure the site (Art. 6(1)(f) GDPR) and deleted after [x] days.

3. Accounts

When you create an account we process your name, email address, password hash, role (brand or creator) and the profile data you provide, to perform the contract with you (Art. 6(1)(b) GDPR). Creator profiles you publish are publicly visible.

4. Creator metrics

Metrics are entered by creators themselves (Self-reported), taken from publicly available sources or official public APIs (Public), or — once available and only with the creator's consent — retrieved from connected platform accounts (Verified). We do not scrape platforms against their terms of service.

5. Bookings, messages and reviews

Booking details, messages and reviews are stored to provide the marketplace service (Art. 6(1)(b) GDPR). Reviews are visible on public profiles.

6. Emails

We send transactional emails (account confirmation, password reset, booking notifications) via [IONOS mail / SMTP provider].

7. Waitlist

If you join the waitlist we store your email and the details you submit to contact you about ProofKol (Art. 6(1)(a) GDPR). You can withdraw consent anytime.

8. Cookies

We only use one technically necessary session cookie. See our cookie notice.

9. Retention & deletion

You can delete your account at any time in Settings; associated data is deleted, except where statutory retention obligations apply [specify].

10. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to lodge a complaint with a supervisory authority [competent authority].