Privacy Policy

What we collect

Account information: email address, a hashed (never plaintext) password, and your role (Brand or Model).

Profile information: for Brands, company name, bio, website, and logo. For Models, name, username, bio, location, hourly rate, and any of the optional identity fields you choose to provide (photo, age, height, clothing size, gender, social media handles). These fields are optional except where a specific Campaign requires them to determine fit, and are visible to a Brand once you accept or are considered for that Brand's Campaign.

Campaign and payment data: Campaign details, acceptances, counter-offers, messages sent through a Campaign's thread, proof of performance you submit, and payment records processed through our payment processor (we do not store your full payment card details; those are handled directly by the payment processor).

Usage data: standard technical data such as IP address (used for rate limiting and abuse prevention) and timestamps of account activity.

How we use it

To operate the marketplace: matching Brands and Models, processing payments, verifying performance, calculating and tracking payouts, and enabling messaging between the two sides of an accepted Campaign. We do not sell your personal information.

Who can see what

A Model's profile information (including any optional fields provided) is visible to Brands browsing or reviewing offers on the Platform. A Brand's profile is visible to Models browsing Campaigns. Messages within a Campaign's thread are visible only to that Campaign's Brand and accepted Model. Proof of performance is visible to that Campaign's Brand and Model, and to the Platform operator for dispute review.

Retention

We retain account and Campaign records for as long as the account is active and for a reasonable period afterward for recordkeeping, tax, and legal purposes.

Your choices

Optional identity fields can be left blank or removed at any time from your profile settings. You may delete your account yourself at any time from Settings (see below).

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights with respect to your personal information. You can exercise most of these yourself, at any time, from Settings inside your account.

Right to know and access. Settings > "Download my data" gives you a copy of the account, profile, campaign, message, and payment information tied to your account, in a portable format.

Right to correct. Your profile edit page lets you correct or update your information directly; changes save immediately.

Right to delete. Settings > "Delete my account" permanently removes your profile, photo or logo, and social/identity details, and redacts messages and comments you authored. Some records are kept even after deletion, as CCPA itself permits: Campaign and payment records are retained, with your identity removed, because the other party to a Campaign has their own right to that transaction history, and because payment records must be kept for recordkeeping, tax, and legal purposes. Deletion is blocked while you have an unresolved transaction (a payout still owed to you, or a Campaign in progress) - you'll be told what to resolve first.

Right to opt out of sale or sharing. We do not sell or share your personal information today. Settings lets you record an opt-out preference regardless, so it's honored automatically if that ever changes.

Right to limit use of sensitive personal information. Messages you send through a Campaign's thread are used only to operate that thread. Settings lets you record a preference limiting that use to what's necessary to provide the Platform.

Non-discrimination. We will not deny you service, charge you a different price, or provide a different level of service because you exercised any of these rights.

Requests without an account, or from an authorized agent. Email adar@carveresq.com. We may need to verify your identity (or your agent's authority to act for you) before fulfilling a request submitted this way.

Backups. Routine database backups are retained on a rolling basis and may contain your information as it existed before a correction or deletion, until that backup cycles out.