LEGAL

Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how Kleepa collects, uses, shares, and protects personal data when you visit our website, create an account, or use our platform as a creator or as a business. It also describes the rights you have over your personal data and how to exercise them. Please read it alongside our Cookie Policy and Terms of Service.

1. Who We Are

Kleepa ("Kleepa", "we", "us", or "our") operates the influencer marketing marketplace available at kleepa.com. For the purposes of applicable data protection law, including the UK and EU General Data Protection Regulation (GDPR), Kleepa is the "controller" of the personal data described in this policy. If you have any questions or wish to exercise your rights, you can contact us at privacy@kleepa.com.

2. Information We Collect

We only collect the personal data we need to operate the platform, complete transactions, keep the marketplace safe, and comply with our legal obligations. The categories below reflect how the platform actually works.

2.1 Information you provide to us

  • Account details: your first and last name, email address, password (stored only in hashed form by our authentication provider), and whether you register as a creator or a business.
  • Profile details: for creators, this may include your username, bio, content categories and niches, rates, availability, social media links, and portfolio media you upload. For businesses, this may include your company or brand name and related profile information.
  • Age confirmation: Kleepa is for adults only. During onboarding you provide your real name and date of birth and confirm that you are 18 or older. We store this confirmation and your date of birth to enforce our 18+ requirement. We do not collect government identity documents or selfies for age checks.
  • Payment and payout information: when businesses pay for a project or creators receive a payout, payment card details and bank or payout account details are collected and processed directly by Stripe. Kleepa does not store full card numbers or bank credentials. We retain related records such as transaction amounts, escrow status, invoices, and payout history.
  • Content and communications: project briefs, deliverables, revisions, files you upload (avatars, portfolio items, project attachments), and messages you exchange with other users through the platform.
  • Support and correspondence: information you provide when you contact us for support, ask a question, or respond to communications from us.

2.2 Information we collect automatically

  • Usage and device information: when you use the platform we may record technical information such as your device and browser type, approximate location derived from your IP address, and the pages you visit. We keep a lightweight record of site visits (a per-day, per-visitor count and the page path) to understand traffic and improve the product.
  • Analytics: we use Vercel Analytics, a privacy-friendly, cookieless analytics service, to measure aggregate usage. It does not build advertising profiles or track you across other websites.
  • Cookies and similar technologies: we use a small number of cookies that are essential to sign-in and to deduplicate visit counts. See our Cookie Policy for the full list. We do not use advertising or cross-site tracking cookies.

2.3 Information from third parties

We receive verification results and payment or payout status updates from Stripe, and email delivery status from our email provider. We do not buy personal data from data brokers.

3. How We Use Your Information

We use personal data to:

  • Create and manage your account and provide the platform and its features;
  • Enable the core marketplace: discovery and search, shortlists, job postings and bids, bookings, briefs, projects, deliverables, revisions, approvals, and messaging between users;
  • Process payments, hold funds in escrow, calculate commission, and pay out creators through Stripe;
  • Confirm age (18+), prevent fraud, and keep the marketplace and its users safe;
  • Send you service and transactional communications (for example account, booking, project, and payment notifications) and, where permitted, marketing emails you can opt out of at any time;
  • Provide customer support and respond to your requests;
  • Measure, analyze, and improve the platform, and develop new features;
  • Comply with legal obligations and enforce our Terms of Service.

3.1 Legal bases (UK/EU users)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the platform, process bookings, and pay creators); legitimate interests (to secure the platform, prevent fraud, analyze usage, and improve our services, balanced against your rights); legal obligation (for tax, accounting, age verification, and anti-fraud requirements); and consent (for optional marketing where required, which you can withdraw at any time).

4. How We Share Your Information

We do not sell your personal data. We share it only as needed to run the platform and as described below:

  • With other users: your public profile, portfolio, and information relevant to a project (for example your brief, messages, or deliverables) are shared with the counterparty to that project as part of the normal operation of the marketplace.
  • With service providers (sub-processors) who act on our behalf:
    • Supabase — database, authentication, and file storage for account, profile, and content data.
    • Stripe — payment processing, escrow, and creator payouts (Stripe Connect).
    • Mailgun — delivery of transactional and marketing emails.
    • Vercel — website and application hosting and cookieless analytics.
  • For legal and safety reasons: where required by law, legal process, or a valid government request, or to protect the rights, property, or safety of Kleepa, our users, or the public.
  • In a business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
  • With your consent: for any other purpose we describe to you and to which you agree.

5. Cookies and Tracking

We use only essential and analytics cookies, and our analytics provider is cookieless. We do not use advertising or cross-site tracking technologies. For details of each cookie and how to manage them, see our Cookie Policy.

6. Data Retention

We keep personal data for as long as your account is active and for as long as needed to provide the platform. After that, we retain certain data where required to comply with legal, tax, accounting, or anti-fraud obligations, to resolve disputes, and to enforce our agreements. Transaction and payout records are typically retained for the periods required by financial and tax law. When data is no longer needed, we delete or anonymize it.

7. International Data Transfers

Our service providers may process personal data in countries outside the UK or European Economic Area. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or a recognized adequacy decision, to ensure your data remains protected.

8. How We Protect Your Data

We use technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, access controls, and reputable infrastructure providers. Sensitive payment and identity data is handled directly by Stripe. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a data breach where the law requires it.

9. Your Privacy Rights

9.1 UK and EU (GDPR)

Subject to certain conditions, you have the right to:

  • Access the personal data we hold about you and receive a copy;
  • Rectify inaccurate or incomplete data;
  • Erase your data (the "right to be forgotten");
  • Restrict or object to certain processing, including profiling and direct marketing;
  • Data portability (receive your data in a portable format);
  • Withdraw consent at any time where processing is based on consent;
  • Lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).

9.2 California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request access to and deletion of your information, to correct inaccurate information, and to be free from discrimination for exercising these rights. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

9.3 How to exercise your rights

You can exercise your rights by emailing privacy@kleepa.com. We may need to verify your identity before acting on a request. You may also update much of your information directly in your account settings. We will respond within the timeframes required by applicable law.

10. Marketing Communications

We may send you marketing emails about features and offers relevant to your account. You can opt out at any time using the unsubscribe link in those emails or by contacting us. Opting out of marketing does not stop essential service and transactional messages related to your account, bookings, and payments.

11. Third-Party Links

The platform may contain links to third-party websites and services. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.

12. Children's Privacy

Kleepa is intended only for users who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For any privacy question or to exercise your rights, contact us at privacy@kleepa.com.