Privacy Policy

1. Introduction

Crevoca ("we," "us," or "our") operates the website at influence-arena-pro.base44.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Information you provide:

• Account information: name, email address, password, and account type (business or creator).
• Profile information: company name, website, industry, bio, location, social media handles, and profile images.
• Campaign information: campaign details, budgets, target audiences, deliverables, and compensation data.
• Communication data: messages exchanged between businesses and creators on the platform.
• Payment information: billing details processed through our payment provider, Stripe.

Information collected automatically:

• Usage data: IP address, browser type, device information, pages visited, and interaction data.
• Cookies and similar technologies: used to remember your preferences, keep you signed in, and understand how you use the Service.

3. How We Use Your Information

• To create and manage your account and profile.
• To facilitate connections and communications between businesses and creators.
• To process subscription payments and manage billing.
• To provide AI-assisted features such as campaign briefs, creator recommendations, and performance analysis.
• To send service-related notifications, updates, and security alerts.
• To monitor and analyze usage patterns to improve and optimize the Service.
• To detect, prevent, and address fraud, abuse, and violations of our Terms.

4. How We Share Your Information

We may share your information with:

• Service providers: Third-party vendors that support our operations, such as Stripe (payment processing), hosting providers, and analytics tools. These providers are bound by confidentiality obligations.
• Other users: Profile and campaign information you choose to share is visible to other users as part of the Service's marketplace functionality.
• Legal authorities: When required by law, court order, or to protect our rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets, information may be transferred to the acquiring entity.

5. Cookies

We use cookies and similar technologies to operate and improve the Service. You can control cookies through your browser settings. Our cookie consent banner allows you to accept or decline non-essential cookies. See our cookie preferences for more detail.

6. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

8. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing of your data.
• Withdraw consent for data processing based on consent.
• Request a portable copy of your data.

To exercise these rights, contact us at the email provided below.

9. GDPR — European Economic Area and United Kingdom

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and the UK GDPR, respectively. This section supplements the rights described above.

Legal basis for processing:

We process your personal data under the following lawful bases: (a) consent — where you have given clear consent for specific processing, such as non-essential cookies and marketing communications; (b) contract — where processing is necessary to provide the Service you have requested; (c) legitimate interests — where processing is necessary for our legitimate business interests, such as security, fraud prevention, and service improvement, and these interests are not overridden by your rights; and (d) legal obligation — where processing is required to comply with applicable law.

Additional GDPR rights:

• Right to be informed: You have the right to be informed about the collection and use of your personal data, as set out in this policy.
• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that inaccurate personal data be corrected.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data, subject to legal retention requirements.
• Right to data portability: You may receive your personal data in a structured, machine-readable format and transmit it to another controller.
• Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to restriction of processing: You may request that we limit our processing of your personal data in certain circumstances.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, unless certain exceptions apply.

International data transfers:

Your personal data may be transferred to and processed in countries outside the EEA or UK. Where this occurs, we ensure appropriate safeguards are in place, which may include Standard Contractual Clauses approved by the European Commission, the EU-US Data Privacy Framework, or other lawful transfer mechanisms. A copy of the relevant safeguards can be obtained by contacting us.

Right to withdraw consent:

Where we process your personal data based on consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal. You can manage cookie preferences through the consent banner or your browser settings, and unsubscribe from marketing communications via the link in each email.

Right to lodge a complaint:

You have the right to lodge a complaint with your local data protection authority. In the EEA, this is the supervisory authority in your member state; in the UK, this is the Information Commissioner's Office (ICO). However, we encourage you to contact us first so we can address your concerns directly.

Data Processing Addendum:

Business customers may request a Data Processing Addendum (DPA) that governs our role as a processor of personal data on their behalf. Our DPA is available here.

10. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect information from children. If you believe we have collected information from a child, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us through our contact page.