Privacy Policy

What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include the following:

• Full name and display name
• Email address and password (stored securely via Firebase Authentication)
• Profile photo
• Company name, industry, and business description (brand accounts)
• Social media handles and platform follower/engagement statistics (creator accounts)
• Bank account details including IBAN and beneficiary name (creator accounts — for payout processing only)
• Video content uploaded as campaign deliverables
• Campaign briefs, deal terms, and signed contract data
• In-app messages and communications between brands and creators
• Reviews, ratings, and reports submitted about other users
• Dispute details and resolution records

Payment Information. We facilitate payments between brands and creators via manual bank transfer. When you initiate a payment, we collect transaction reference numbers and confirmation details for record-keeping and dispute resolution. We do not store full payment card numbers on our servers. Where card payments are supported in future, they will be processed by Stripe, Inc., directly.

Sensitive Information. Bank account information (IBAN, beneficiary name, bank name) is collected from creator accounts solely to process payouts. This data is stored securely in Firebase and is accessible only to platform administrators for the sole purpose of releasing funds.

Information automatically collected

We automatically collect certain information when you use the Services, including:

• Device Data. Mobile device model, operating system version, unique device identifiers, and mobile network information.
• Push Notification Tokens. Device tokens used to deliver push notifications about deal updates, payments, messages, and disputes.
• Usage Data. Information about features used, screens viewed, and actions taken within the App, collected through Firebase Analytics.
• Log Data. IP address, access times, and error logs collected by Firebase for security and performance monitoring.

How Do We Process Your Information?

We process your personal information for the following purposes:

• Account creation and authentication. To create and maintain your account and verify your identity.
• Creator approval and verification. To review creator profiles for platform eligibility, including verifying social media handles.
• Deal facilitation. To match brands with creators, enable campaign creation, manage deal status, and generate contracts.
• Payment and payout processing. To track escrow payments, confirm bank transfers, and release payouts to creators after deal completion.
• Video deliverable management. To store, transmit, and enable review of video content uploaded by creators for brand approval.
• In-app messaging. To operate the direct messaging system between deal participants.
• Push notifications and alerts. To send you timely updates about deal progress, contract signing, payments, messages, and disputes.
• Reviews and ratings. To enable users to submit and display reviews after deal completion.
• Dispute resolution and platform moderation. To investigate disputes, review reports, and take appropriate action.
• Legal compliance. To comply with applicable laws and regulations in Kuwait, the UAE, and other relevant jurisdictions.
• Security and fraud prevention. To monitor for fraudulent activity, abuse, and violations of our Terms and Conditions.

When and With Whom Do We Share Your Information?

• Between brands and creators. When a deal is active, certain profile information is shared between the brand and creator parties. This information is only revealed after both parties have signed the deal contract.
• With platform administrators. Our admin team can access deal records, payment information, dispute details, user reports, and profile data as necessary to operate and moderate the platform.
• With service providers. We share information with third-party vendors that perform services for us, such as data storage, push notifications, and payment processing.
• Business transfers. We may share your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal requirements. We may disclose your information where required by law or in response to valid requests by public authorities.
• With your consent. We may disclose your personal information for any other purpose with your explicit consent.

Third-Party Services

Google Firebase (Google LLC). We use Firebase for user authentication, real-time database storage (Firestore), file storage (Cloud Storage), serverless cloud functions, and push notifications. Data is processed on Google's infrastructure. Firebase's privacy policy is available at firebase.google.com/support/privacy.

Stripe, Inc. Where supported currencies allow, we may use Stripe to process card payments. Stripe processes payment data directly and we do not store full card numbers on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Apple Inc. (Push Notification Service). We use Apple's Push Notification Service (APNs) to deliver push notifications to iOS devices. Apple's privacy policy is available at apple.com/legal/privacy.

The Services are hosted and operated through Google Firebase infrastructure. If you access the Services from outside Kuwait, your data may be transferred to and processed in the United States and other countries where Google operates data centers, in accordance with Google's data transfer mechanisms and safeguards.

How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. Deal records, signed contracts, and payment history are retained for a minimum of five (5) years following deal completion or termination to comply with applicable commercial and financial regulations in Kuwait and the UAE.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, because data has been stored in backup archives), we will securely store your information and isolate it from further processing until deletion is possible.

How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process, including:

• Firebase Authentication with secure email/password sign-in and session token management
• Firestore Security Rules enforcing role-based access control — brands, creators, and admins each access only the data they are permitted to see
• Encrypted data transmission via HTTPS/TLS for all communications
• Bank account (IBAN) information accessible only to platform administrators for payout processing
• Video deliverables stored in Firebase Cloud Storage with access restricted to deal participants

Despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at support@i3lany.me.

What Are Your Privacy Rights?

Depending on your location and applicable law, you may have the following rights:

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal information, subject to legal retention requirements
• Right to restriction — request that we limit our processing of your personal information
• Right to data portability — request a machine-readable copy of your personal information
• Right to object — object to our processing of your personal information under certain conditions

Account Information: You may update your profile information directly within the App at any time. To request account termination or deletion of your personal information, please contact us at support@i3lany.me.

Push Notifications: You may opt out of push notifications at any time by adjusting the notification settings on your mobile device.

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your browsing activity tracked. Because no uniform standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT signals. If a standard is adopted in the future, we will update this Privacy Policy accordingly.

Do We Make Updates to This Notice?

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised 'Last updated' date at the top of this page. If we make material changes, we may notify you by posting a prominent notice within the App or by sending you a direct notification. We encourage you to review this Privacy Policy periodically.

How Can You Contact Us About This Notice?

If you have questions or comments about this Privacy Policy, you may contact us at:

How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please submit a request to support@i3lany.me. We will respond to your request within 30 days.