1. INTRODUCTION AND SCOPE
This Privacy Policy (“Policy”) governs the processing of personal data by Requesty, LLC (“Requesty,” “we,” “us,” or “our”). This Policy applies to our directory, platform, and related services (collectively, the “Platform”). By accessing the Platform, you acknowledge that you have read and understood this Policy.
2. DEFINITIONS
- Consumer: A natural person who is a resident of Delaware or other applicable jurisdictions acting in an individual or household context.
- Personal Data: Any information that is linked or reasonably linkable to an identified or identifiable natural person.
- Publicly Available Information: Information that is lawfully made available through widely distributed media or government records, which Requesty has a reasonable basis to believe a consumer has lawfully made available to the general public.
3. CATEGORIES OF DATA COLLECTED
A. Publicly Sourced Data (Scraped)
Requesty aggregates publicly available information to maintain a comprehensive creator directory. This includes:
- Identifiers: Social media handles, legal names, and public profile IDs.
- Professional Content: Public bios, profile imagery, and publicly shared media.
- Engagement Metrics: Publicly visible follower counts, view counts, and interaction rates.
- Public Contact Info: Email addresses or links explicitly listed in public bios for business inquiries.
B. User-Provided Data
Data collected when a user creates an account or manages a profile. This includes all information they choose to add to the Platform—for example text, photos, videos, and data from integrations they connect:
- Account Credentials: Email address, password, and internal identifiers.
- Profile Content and Media: Photos, videos, text, bios, links, and other materials uploaded or published on a profile.
- Integrations: Information from third-party services or integrations connected to an account, as permitted by the user and those services.
- Professional Preferences: Accepted request types, pricing, and currency settings.
- Communications: Content of requests and messages sent through the Platform.
C. Automatically Collected Data
- Technical Identifiers: IP addresses, device types, and browser metadata.
- Usage Analytics: Interaction data, click-through rates, and session durations.
4. LEGAL BASIS FOR PROCESSING (GDPR/UK GDPR)
For users in the EEA/UK, we process data under the following bases:
- Legitimate Interests (Art. 6(1)(f)): To provide a searchable directory of public figures and creators to facilitate professional commerce.
- Contractual Necessity (Art. 6(1)(b)): To provide services to users who have registered or who manage a profile on the Platform.
- Legal Obligation (Art. 6(1)(c)): To comply with tax, fraud, and regulatory requirements.
5. DATA RETENTION AND STORAGE
Requesty retains Publicly Sourced Data indefinitely to maintain directory integrity and facilitate historical commerce requests. User-Provided Data is retained for the duration of the account’s activity. All data is subject to our “Right to Erasure” protocols described in Section 9.
6. DISCLOSURE TO THIRD PARTIES
We do not sell personal data for monetary consideration. We share data with:
- Communication Providers: To deliver email-based requests.
- Analytics Providers: To monitor platform performance.
- Infrastructure Providers: For secure cloud hosting and content delivery.
7. AUTOMATED DECISION-MAKING AND AI
Requesty may utilize automated processing and Artificial Intelligence (“AI”) to categorize creators, generate profile summaries from public data, and improve search relevance. You have the right to opt-out of profiling that produces legal or similarly significant effects.
Exclusion of Google User Data: For the avoidance of doubt, data obtained through Google Workspace APIs (including Google Calendar data) is strictly excluded from any AI or ML model processing, profiling, or automated categorization.
8. GOOGLE API USER DATA & LIMITED USE DISCLOSURE
Requesty's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Calendar user data is accessed solely to check availability and prevent double bookings for creators. Google user data is never shared with third-party AI services, sold, or used to train, develop, or improve artificial intelligence or machine learning models.
9. USER RIGHTS AND APPEALS
Regardless of jurisdiction, Requesty provides the following rights:
- Right to Know/Access: Confirmation of data processing and a copy of specific data held.
- Right to Correct: Inaccuracies in your profile (for example, by signing in and updating your profile, or by contacting us).
- Right to Delete: Permanent removal of your data from our active directory.
- Right to Opt-Out: Of targeted advertising or the “sale/sharing” of data.
- Appeals: If we refuse a rights request, you may appeal by contacting our Privacy Officer.
10. SECURITY
We maintain reasonable administrative, technical, and physical security practices appropriate to the volume and nature of the data to protect the confidentiality and integrity of our Platform.
11. UPDATES TO THIS POLICY
We may update this Privacy Policy periodically. Changes take effect when posted. Continued use of the Platform constitutes acceptance of the updated policy.
Any translation of this document is provided for convenience only. The English version is the official and binding version and prevails in case of any conflict or discrepancy with a translation.
Questions?
Contact us at: [email protected]