Privacy Policy
Last updated: April 2026
1. What We Collect
When you sign in with Google, we receive your email address, display name, and profile photo. We store this information in our database to create your account. We do not collect any additional personal data.
2. How We Use Your Data
Your data is used solely to provide the platform's features: displaying your profile, associating content you submit with your account, and enabling you to manage your listings. We do not sell, rent, or share your personal data with third parties.
3. Cookies & Analytics
We use cookies only for authentication purposes (to keep you logged in). We do not use tracking cookies or third-party advertising cookies. We may use basic anonymous analytics to understand overall traffic patterns.
4. Data Storage
Your data is stored on Supabase infrastructure. We take reasonable measures to protect your information, but no system is 100% secure. By using this platform, you accept this inherent risk.
5. Your Rights
You can request deletion of your account and associated data at any time by contacting us via TikTok DM. We will process deletion requests within a reasonable timeframe.
6. Third-Party Services
We use Google OAuth for authentication and Supabase for data storage. Please review their respective privacy policies for details on how they handle your data.
7. Changes to This Policy
We may update this policy from time to time. The latest version will always be available at this URL. Continued use of the platform after changes constitutes acceptance of the updated policy.
8. Contact
For privacy-related questions or data deletion requests, please reach out via TikTok DM.
Contact via TikTok DM →9. Legal Basis for Processing (GDPR)
For users in the EEA, we process your personal data under Article 6(1)(b) GDPR — processing necessary for the performance of a contract. By creating an account, you enter into an agreement with us to use the platform, and we need your basic profile information to provide this service.
10. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law. Agent listings you have submitted may be anonymized and retained for platform continuity.
11. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our infrastructure providers (Supabase, Google) operate. We rely on standard contractual clauses and adequacy decisions where applicable.
12. Account Deletion & Right to Erasure
You have the right to request deletion of your account and personal data at any time. To delete your account, go to Settings → Delete Account. Upon your request: (1) Your account is immediately soft-deleted — you are logged out on all devices and your data is no longer used. (2) You have a 30-day grace period during which you can cancel the deletion by logging back in. (3) After 30 days, your profile, email, and personal identifiers are permanently and irreversibly deleted. Agent listings you created are anonymized — the content remains but your identity is removed. We retain a GDPR-compliant audit record (hashed email only, no plaintext PII) for accountability. Note: some data may persist in encrypted backups for up to 90 days, but it is never used after deletion and is purged during normal backup rotation.