Privacy Policy

VidRequest ("we," "us," or "our") is committed to protecting the privacy of our users ("User," "you," or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our platform, website, mobile applications, and related services (collectively, the "Platform").

By using the Platform, you consent to the data practices described in this policy. If you do not agree with this policy, you must discontinue use of the Platform immediately.

Account Information: When you register, we collect your name, email address, chosen role (Brand or Creator), profile photo, and other profile details you provide. Creators may also provide social media links, portfolio samples, category preferences, and availability information.

Identity Verification (KYC): Creators are required to complete identity verification through our third-party verification partner. Identity documents are processed and stored by the verification provider. We receive and store only the verification status (approved, pending, or declined) and do not retain copies of identity documents on our servers.

Payment Information: Payment details (credit card numbers, bank account information) are collected and processed directly by our third-party payment processor (Stripe). We do not store, access, or have the ability to view your full payment credentials. We receive only the information necessary to confirm transaction status and manage payouts, such as the last four digits of a card, transaction amounts, and payout status.

Communications: We collect messages sent through the Platform's order chat system, support inquiries, dispute submissions, and any other communications you send to us or other Users via the Platform.

Usage Data: We automatically collect information about how you interact with the Platform, including pages visited, features used, actions taken, timestamps, referral sources, and the frequency and duration of your activities.

Device & Technical Data: We collect information about the device and browser you use to access the Platform, including IP address, browser type and version, operating system, screen resolution, language preferences, and unique device identifiers.

Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage patterns. See our Cookie Policy for details.

We process your personal information on the following legal bases, as applicable under your jurisdiction:

• Contractual necessity: Processing required to provide you with the Platform's services, process orders, and manage your account
• Legitimate interests: Processing for fraud prevention, security, Platform improvement, and analytics, where these interests are not overridden by your data protection rights
• Consent: Processing based on your explicit consent, such as for marketing communications, which you may withdraw at any time
• Legal obligation: Processing required to comply with applicable laws, regulations, or legal processes

We use the information we collect to:

• Create and manage your account and authenticate your identity
• Facilitate transactions between Brands and Creators, including order processing, escrow management, and payouts
• Verify Creator identities through our KYC process
• Enable communication between Users through order chat and notifications
• Provide customer support and respond to your inquiries
• Mediate and resolve disputes between Users
• Detect, prevent, and investigate fraud, abuse, security incidents, and other prohibited activities
• Enforce our Terms of Service and other policies
• Analyze Platform usage to improve features, performance, and user experience
• Send transactional communications such as order confirmations, delivery notifications, and security alerts
• Send promotional communications with your consent (which you may revoke at any time)
• Comply with legal obligations, including tax reporting and responding to lawful requests from authorities
• Generate aggregated, anonymized statistics about Platform usage that cannot be used to identify you

We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:

Between Users: When you place or accept an order, certain profile information (such as your display name, profile photo, ratings, and relevant portfolio information) is shared with the other party. Order-specific communications are shared between the Brand and Creator involved in the order.

Service Providers: We share information with trusted third-party service providers who assist us in operating the Platform, including:

• Payment processing (Stripe)
• Identity verification (KYC provider)
• Cloud infrastructure and data hosting
• Email delivery services
• Analytics and error monitoring tools
• File storage and content delivery

These providers are contractually obligated to process your data only on our behalf and in accordance with our instructions, and to maintain appropriate security measures.

Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.

Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Aggregated Data: We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for any purpose, including research, analytics, and marketing.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Active accounts: We retain your account data for the duration of your account's existence
• Deleted accounts: Upon account deletion, we delete or anonymize your personal data within 30 days, except as noted below
• Financial records: Transaction and payment records are retained for up to 7 years as required by tax and financial reporting laws
• Dispute records: Records related to disputes are retained for up to 3 years following resolution
• Legal holds: We may retain data longer if required for pending or anticipated legal proceedings

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Secure authentication with password hashing and optional multi-factor authentication
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and monitoring
• Incident response procedures for potential data breaches

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your information and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

Depending on your jurisdiction (including but not limited to rights under the GDPR, CCPA/CPRA, LGPD, and other applicable privacy laws), you may have some or all of the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your personal data in a structured, commonly used, machine-readable format
• Restriction: Request restriction of processing of your personal data in certain circumstances
• Objection: Object to processing of your personal data based on legitimate interests
• Withdraw consent: Withdraw your consent for processing at any time, where processing is based on consent
• Non-discrimination: Exercise your privacy rights without receiving discriminatory treatment

To exercise any of these rights, contact us at hello@vidrequest.com. We will respond to your request within the timeframes required by applicable law (typically 30 days). We may ask you to verify your identity before processing your request.

If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction.

When we transfer personal data internationally, we take appropriate safeguards to ensure your data receives an adequate level of protection, including:

• Standard contractual clauses approved by relevant authorities
• Transfers to countries that have been determined to provide adequate data protection
• Contractual obligations on our service providers to protect your data

The Platform is not intended for individuals under 18 years of age (or the age of legal majority in your jurisdiction, whichever is greater). We do not knowingly collect personal information from minors.

If we learn that we have inadvertently collected personal information from a minor, we will take steps to delete that information as promptly as possible. If you believe a minor has provided us with personal information, please contact us at hello@vidrequest.com.

Some web browsers transmit "Do Not Track" (DNT) signals. Because there is no universally accepted standard for how to respond to DNT signals, the Platform does not currently respond to DNT signals. We will update this policy if a standard is established.

The Platform may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we hold about you
• The right to opt out of the sale or sharing of personal information (note: we do not sell personal information)
• The right to correct inaccurate personal information
• The right to limit use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

To exercise your rights, contact us at hello@vidrequest.com. We do not sell personal information as defined under the CCPA/CPRA.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 8 above. Our legal bases for processing are described in Section 3.

You have the right to lodge a complaint with your local supervisory authority if you believe your data has been processed unlawfully.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will provide notice of material changes by updating the "Last updated" date at the top of this page and, where practicable, by notifying you via email or in-app notification at least 30 days before the changes take effect.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

For questions, concerns, or requests related to this Privacy Policy or our data practices, contact us at hello@vidrequest.com.