Privacy policy
Last updated 9 October 2026
1. Who's responsible
[Company legal name] (company number [number], [address]) is the controller of personal data processed through Rent'a'KOL. Contact: [privacy contact email]. [ICO registration number.]
2. What we collect
- Account: name, email, role (brand or creator), company name and website for brands, and who referred you.
- Login with X: your X user id, username, display name and, if X shares it, email.
- Creator profile: handle, bio, niche, tags, rate card and the rules you set for offers.
- Social accounts and communities you connect: public profile details and audience figures (followers, views, engagement, verified badge, account age), and community names and member counts. Access tokens are stored encrypted and used only to refresh these figures.
- Private contact handle: the Telegram, WhatsApp, email or Discord handle you give us. Only we use it, to reach you about deals. It isn't shown to brands.
- Telegram: your Telegram chat id, once you link the bot, so it can send you offers.
- Payouts: your Stripe account id and payout status, or your USDC address and chain. Bank and identity details you give Stripe are held by Stripe, not us.
- Deals: briefs, deliverables, deadlines, amounts, delivery links, deal-thread messages, disputes, ratings and points.
- Payments: Stripe processes card and bank details. We see the amount, status and Stripe ids, not your full card number.
- Technical: IP address, browser and server logs, kept for security and debugging.
3. Why we use it, and our lawful basis
- To run the marketplace (accounts, listings, bookings, payments, payouts, messaging, notifications): to perform our contract with you.
- To verify creators and prevent fraud and circumvention: our legitimate interest in a trustworthy marketplace.
- To keep records for tax, accounting and anti-money-laundering: legal obligation.
- To show ratings and rank the leaderboard: contract and legitimate interest.
- Product emails about your deals are part of the service. We don't send marketing without your consent, and you can opt out at any time.
4. Who we share it with
- The other side of a deal: what's needed for that deal (brief, delivery link, thread messages, ratings). Brands see a creator's public profile, never their contact handle.
- Service providers who process data for us: Supabase (database and login), Vercel (hosting), Stripe (payments, payouts and identity checks), Telegram (bot messages), Resend (email) and X (login). [Confirm the list and data locations.]
- Authorities where the law requires, for example HMRC or law enforcement.
We don't sell personal data. Some providers process data outside the UK; where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
5. Cookies
We use only cookies the site needs to work:
- Login session (
sb-…): keeps you logged in. - Referral (
rk_ref, 30 days): remembers the referral link you arrived from so the referrer gets credit.
We don't use advertising or analytics cookies. If that changes, we'll ask first.
6. How long we keep it
Account data for as long as your account is open. Deal and payment records for [6] years after the deal, for tax and legal reasons. Social access tokens until you disconnect the account or close yours. Logs for [30] days. [Confirm retention periods.]
7. Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. Some data we must keep (for example deal and payment records). Write to [privacy contact email]. You can also complain to the Information Commissioner's Office (ico.org.uk).
8. Security and age
Data is encrypted in transit. Access to contact details and tokens is limited to the services that need them. Rent'a'KOL is for people aged 18 and over.
9. Changes
We'll update this policy when what we collect or how we use it changes, and tell you about significant changes. The terms of use cover how the marketplace works.