Privacy Policy (GDPR)
Draft v0 · Last updated July 2026
This policy describes how ViralBounty processes personal data as a controller under the EU General Data Protection Regulation.
1. Data we process
Account data (email, name, country, date of birth), linked social-account identifiers and metrics retrieved via official APIs, contract acceptance records (version, timestamp, IP), payment and KYC data processed by our payments partner, and platform usage data.
2. Purposes and legal bases
Operating the marketplace (contract performance), fraud prevention and metric verification (legitimate interest), tax and DAC7 reporting of creator income (legal obligation), and marketing communications (consent).
3. Your rights
Access, rectification, erasure, portability, restriction and objection. Requests are honored via the account settings or by contacting the data protection contact below.
4. Processors and transfers
Payments and identity verification (Stripe), hosting in the EU, email delivery, and analytics providers under data-processing agreements. No sale of personal data.
5. Retention
Ledger, contract-acceptance and tax-reporting records are retained for statutory periods; other data is deleted or anonymized when no longer needed.