Scope and responsibility
This policy explains personal information handled by Gramsify for its website and installed web app. Operator and privacy contact details are displayed alongside this policy. Participating brands, creators, linked social networks and payment providers handle information they receive under their own responsibilities and notices. Do not include another person’s personal information unless you have an appropriate reason and permission where required.
Information you provide
Account information includes your name, email, account role, password hash, verification status and account activity dates. For new registrations, the platform also records the policy texts or versions accepted and the time of acceptance. Passwords are stored as hashes rather than readable passwords.
Profile and business information can include your biography, location at country/city level, language, interests, self-reported audience size, social or website links, avatar, portfolio and business details. Collaboration information includes briefs, applications, pitches, agreed terms, messages, files, deliverables, feedback and reviews.
Support, verification and moderation records include the information you provide in a request, contact details, relevant references and case notes. A delivery address or other detail entered into a collaboration message is stored as part of that conversation. Share only what is needed; do not submit passwords, financial credentials or unnecessary sensitive information.
Information produced during use
The application records session identifiers, security and administrative events, saved items, notification state and aggregate daily counts for events such as page views or applications. Its built-in aggregate reporting is not a cross-site advertising profile. Hosting, network and email services may process technical logs, such as IP address, browser information and delivery or security records, to provide and protect the service.
The installed web app stores an essential local cache of static interface files and a generic offline screen. It does not intentionally cache account pages, private messages, creator applications or uploaded media for offline reading. The app does not request continuous device location, microphone access, contact-list access or push-notification permission.
Why information is used
Information is used to create and secure accounts; display profiles and opportunities according to visibility settings; match search filters; handle applications and collaboration rooms; provide requested email verification or password resets; deliver in-app notices; answer support requests; investigate abuse; maintain records of permissions; operate and improve the service; and meet applicable legal duties.
We use an appropriate legal basis for the processing where applicable law requires one, which may include your requested service or agreement, consent, a legal obligation or a permitted legitimate interest. Where processing depends on consent, you may withdraw it using the relevant setting or by contacting Support. Withdrawal does not undo processing already lawfully completed. Optional marketing or advertising tracking must have an appropriate notice and choice before it is introduced.
Who can see information
A creator profile is private until the creator chooses public visibility and meets the platform’s publication requirements. Published profiles, brand pages, live opportunities and published reviews can be seen by visitors and may be indexed or copied by search engines or other people. Disabling visibility does not immediately remove copies already made outside the platform.
Applications, private messages and submitted work are available to the relevant creator and business participants and authorised administrators who need access for operation, support or moderation. An opportunity cover becomes publicly accessible when used by a publicly visible opportunity. Unattached or draft-only opportunity covers are not public through that feature.
Operational service providers, such as hosting and configured email services, process information needed to provide their services. Relevant information may also be disclosed when required by law, to respond to valid legal process, protect rights or address serious security or safety concerns. A business transfer may involve personal information subject to appropriate safeguards and notice. We do not sell your personal information or provide an advertising-data marketplace through this platform.
Retention and security
Account and collaboration records are retained while needed to operate the account, fulfil requested functions, protect participants, resolve disputes or satisfy applicable obligations. They are not automatically erased merely because a campaign closes. Expired login sessions and account tokens are cleared by scheduled maintenance. Data deletion requests are handled as described in the Account Deletion Policy.
Deletion from the active service may be followed by expiry from protected backups under the operator’s backup procedures. Where a specific record must be retained, access and use should be limited to the reason for retention. The team will explain relevant limitations when responding to a request.
The service uses access controls, password hashing and protected sessions. HTTPS should be used in production. No system can guarantee absolute security; report suspected exposure through Support. The operator will assess incidents and give notices required by applicable law.
International use and service providers
The community may be accessed from different countries. Information may be processed where the operator, its hosting or other service providers operate. Applicable transfer restrictions and safeguards must be observed. Do not assume that a global opportunity listing means information is hosted in your country or products can be shipped there. You may ask the privacy contact for the current hosting and service-provider arrangements relevant to your request.
Your controls and requests
You can edit profile details and public visibility, manage opportunity alerts, remove saved items, change your password and download the self-service account export. The export covers the data categories identified in Account settings; contact Support if you need access to other personal information. Use Account settings to request deletion or Support if you cannot sign in.
Depending on applicable law and your circumstances, you may have rights to access, correct, erase or obtain information, withdraw consent, object to or restrict processing, or make a complaint. Some laws may provide additional rights, including nomination. Requests are assessed under the law that applies when the request is made; proportionate identity verification and lawful exceptions may apply. You may contact the relevant privacy regulator or other competent authority where a complaint right exists. No wording here removes those rights.
Children and updates
The service is intended for adults aged 18 or over and is not offered for children’s accounts. If you believe a child has registered or personal information about a child was submitted improperly, contact Support so the team can investigate and take appropriate action.
This policy may change when the service or its processing changes. Review the last-updated date and any change notice. Contact the displayed privacy email or submit a Privacy request through Support with the information needed to identify your account and concern.