Privacy Policy

Introduction

We are committed to protecting the privacy of our users. This privacy policy explains what data is collected, how it is used, and the rights of users regarding their personal information.

Data We Collect

• Email and password: These are collected during account creation and are securely stored via Firebase.
• Cookies: We use a cookie to check if a user is logged in. This cookie is essential for maintaining the user's session and is deleted at the end of the session.

Purpose of Data Collection

The data we collect is used solely for the following purposes:

• To enable user login and authentication via email and password.
• To maintain the user session with a session cookie.

Data Retention Period

• Email and password: We retain this data as long as the user's account is active on our service. If the user chooses to delete their account, their data will be erased from our systems within 30 days.
• Cookies: The cookie used to verify if the user is logged in is retained only for the duration of the session and is deleted when the browser is closed or the user logs out.

Sharing Data with Third Parties

We do not share users' personal data (email, password, cookies) with third parties. The only data collected is stored via Firebase, a secure service compliant with data protection standards.

User Rights

In accordance with the General Data Protection Regulation (GDPR), users have the following rights:

• Right of access: You can request access to the personal data we have collected about you.
• Right of rectification: You can request the correction of your personal information if it is inaccurate or incomplete.
• Right of deletion: You can request the deletion of your personal data.
• Right to data portability: You have the right to receive your data in a structured, machine-readable format.

To exercise these rights, you can contact us at: [email protected].

Data Security

We implement appropriate security measures to protect users' personal data from unauthorized access, modification, disclosure, or destruction. The collected data (email and password) is securely stored via Firebase.

Use of Influencers' Data in Reports

Our service allows users to generate reports on advertising campaigns involving influencers. Users are responsible for using influencers' names and personal data in these reports. We do not collect or process influencers' personal data. Users must ensure they have obtained explicit consent from influencers to use their names or other personal information in reports, in accordance with GDPR requirements.

Use of Cookies

We use an essential session cookie to maintain the user's login. This cookie is deleted when the browser is closed and does not collect any personal data other than what is necessary to manage the session.

Data Transfers Outside the EU

The personal data we collect is stored via Firebase, a GDPR-compliant service. Firebase may transfer and process data outside the European Union, particularly in the United States. We ensure that these transfers comply with adequate safeguards required by GDPR, such as the Standard Contractual Clauses approved by the European Commission or other recognized mechanisms.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be published on this page, and users will be informed of any major changes.

Role as a Subprocessor

We act as a subprocessor on behalf of our users (the data controllers), who are responsible for the personal data they collect and process through our service. We process this data solely in accordance with their instructions and in compliance with GDPR requirements.

Third-Party Subprocessors

We use third-party subprocessors, such as Firebase, for the secure storage and processing of personal data. These subprocessors are selected for their compliance with applicable data protection laws, including GDPR. We ensure that subprocessors comply with strict data security and confidentiality obligations.

Notification of Data Breaches

In the event of a data breach, we commit to promptly informing our users as soon as we become aware, in accordance with legal requirements under GDPR. We will provide the necessary information to help users meet their notification obligations to relevant authorities and affected individuals. We will make this notification within 72 hours of discovering the breach, if possible.