Privacy Policy

01.Information We Collect

We only collect what we need to run the platform and connect brands with creators.

• Account info. Name, email, phone, password (hashed), and role (brand or creator).
• Business / profile info. Brand name, HQ city, industry, logo — or creator handles, niches, languages and content samples.
• Connected social data. When you connect Instagram or Facebook (Meta), TikTok, or YouTube (Google), we receive only the data you authorise — typically basic profile details and public metrics such as followers, views and engagement.
• Campaign & wallet data. Briefs, applications, deliverables, ratings, tokens spent or earned, and payout records.
• Technical data. IP address, device, browser, language, and pages visited — used for security and analytics.

02.How We Use Your Information

Your data powers the matching engine, payouts and trust signals — nothing more. We do not use it for any purpose other than operating and improving Fledio.

• Operate the platform. Authenticate you, render dashboards, run campaigns, deliver notifications.
• Match brands & creators. Recommend creators based on niche, tier and engagement; surface opportunities to creators.
• Trust & safety. Verify identity, detect fraud, enforce community guidelines and review reported content.
• Communications. Transactional emails (approval, payouts, OTPs), and product updates you can opt out of.
• Improvement. Aggregated analytics to fix bugs, ship features and benchmark performance.

03.Connected Platform Data (TikTok, Meta, Google)

When you link a third-party account, we access only the data you explicitly authorise and use it solely to operate Fledio's features.

• TikTok. Via TikTok Login Kit we access your basic profile (open id, display name, avatar) and public video statistics (e.g. follower count, view, like and comment counts) to verify your account and show your reach to brands.
• Meta (Instagram / Facebook). We access basic profile information and public content metrics you authorise to verify your creator profile.
• Google (YouTube). We access basic channel and public video metrics you authorise, in line with the Google API Services User Data Policy.

We never sell connected-platform data, never use it for advertising, and never share it except as described in this policy. You can disconnect any account at any time from your Fledio settings, or by revoking Fledio's access in the provider's own settings (for example, TikTok app settings) — revoking access there also disconnects it from Fledio. Our use of information received from these APIs adheres to each provider's developer policies, including the Google API Services User Data Policy and its Limited Use requirements.

04.Data Sharing

We do not sell your personal data. We share it only when strictly necessary.

• Other users. Brands see creator profiles they have matched with; creators see brand briefs they applied to.
• Service providers. Hosting (Supabase, Cloudflare), email (Resend), WhatsApp OTP (Meta), analytics — all bound by data-processing terms.
• Legal. When required by court order, regulator request, or to protect users' safety.
• Business transfers. If Fledio is acquired, your data transfers under the same privacy commitments.

05.Your Rights

You stay in control of your data at all times.

• Access. Download a copy of your profile and campaign history.
• Correct. Edit profile, social handles, payout details from your dashboard.
• Delete. Request full deletion via the Data Deletion page or email privacy@fledio.com.
• Object & restrict. Opt out of marketing emails, disconnect social accounts, pause your profile.
• Portability. Export your data in machine-readable format on request.

06.Data Retention & Deletion

We keep your data only for as long as your account is active or as needed to provide the service.

When you delete your account — via the Data Deletion page or by emailing privacy@fledio.com — we permanently remove your profile, connected-account tokens and personal data within 30 days, except records we are legally required to keep (such as payment and invoice records retained for tax purposes, typically up to 7 years). Tokens received from connected platforms such as TikTok, Meta and Google are deleted as soon as you disconnect the account or close your profile.

07.Cookies & Tracking

We use a small number of cookies — no third-party ad trackers.

• Essential. Session tokens that keep you signed in. Cannot be disabled.
• Preference. Theme, language and onboarding progress.
• Analytics. Anonymous page-view and feature-use counts. Disable any time in your browser.

08.Security

Security is built into every layer of the platform.

• Encryption. TLS in transit, AES-256 at rest. Passwords hashed with bcrypt.
• Access controls. Row-level security on the database; principle of least privilege for staff.
• Audits. Regular vulnerability scans and dependency reviews.
• Incident response. We notify affected users within 72 hours of confirming a material breach.

09.Children's Privacy

Fledio is not intended for anyone under 13. Creators must be 16+ to sign up.

If we discover that we have collected data from a child under 13, we delete it immediately. Parents can contact privacy@fledio.com to request removal.

10.International Transfers

Your data may be stored in Pakistan, the EU or the United States.

We rely on standard contractual clauses and our service providers' adequacy decisions to keep transfers lawful.

11.Changes to This Policy

We will tell you before we change anything that matters.

Material changes are announced by email and an in-app banner at least 14 days before they take effect. Minor edits (typos, formatting) are made silently with the updated date at the top of this page.

12.Contact Us

Privacy questions go straight to a human, not a bot.

Email privacy@fledio.com or use the form on our Contact page. We reply within 5 working days.