This Privacy Policy explains how Keepface Global, Inc. ("Keepface", "we", "us", or "our"), a Delaware corporation, collects, uses, shares, and protects personal data when you use the Keepface marketplace, websites, mobile applications, and related services (the "Service"). It should be read together with our Terms & Conditions and User Agreement.
1. Who We Are
Keepface Global, Inc. is the data controller for personal data processed through the Service. Our registered office is at 1145 Amarillo Avenue, Palo Alto, CA 94303, USA. We operate offices in Baku (Azerbaijan), Antalya (Türkiye), Dubai (UAE), and Palo Alto (USA). For privacy questions, contact us at info@keepface.com.
2. The Data We Collect
2.1 Account & Workspace data
When you register, we collect your email address, password (stored hashed), full name, country, language preference, and the type of Workspace you create (Influencer, Brand, or both). For Brand Workspaces we additionally collect company name and billing details. For Influencer Workspaces we collect biography, content category, gender, the social-media handles you connect, and payout details (bank or Wise account) when you choose to receive a payout.
2.2 Public social-media data
To build the marketplace catalogue we collect publicly available information from the social platforms you operate (Instagram, TikTok, YouTube, Facebook, X), including handle, follower count, engagement rate, recent post samples, and audience-distribution estimates. We use the official platform APIs where available; where they are not, we use compliant scraping limited to information visible to logged-out viewers.
2.3 Campaign & communications data
When a Campaign runs, we record the brief, the channels we deliver it on (email, WhatsApp, Telegram), the messages exchanged, the deliverables submitted, and any approvals, ratings, or disputes filed inside the Service. Campaign messages are retained as part of the campaign record so both Brand and Influencer can rely on a single source of truth.
2.4 Payment data
When you fund Escrow or receive a payout, we record the amount, currency, timing, and the payment-provider reference. Card numbers, full bank details, and similar high-sensitivity payment data are processed directly by our regulated payment partners (e.g. Wise) and are not stored on Keepface servers.
2.5 Device, log, and analytics data
When you visit the Service we collect IP address, browser type and version, device type, operating system, referrer URL, the pages you visit, and timestamps. This data is generated by your browser and by Cloudflare, our hosting and CDN provider, plus by Google Analytics 4 and Google Search Console where you have not opted out of analytics cookies.
2.6 Cookies and similar technologies
We use a small number of cookies and equivalent client-side storage: strictly-necessary cookies (session, authentication, language preference), preference cookies (workspace pinning, dark-mode), and, with your consent, analytics cookies (Google Analytics 4). You can manage your choices in your browser or, where shown, in our cookie banner. Refusing analytics cookies does not affect your access to the Service.
3. How We Use the Data
We use personal data to:
- create and operate your account and Workspaces;
- build and maintain the influencer marketplace, including AI-generated Lists and Intelligence Profiles;
- deliver outreach and campaign communications on your behalf;
- process Escrow funding, Influencer payouts, and refunds;
- provide customer support and resolve disputes;
- protect the Service against fraud, abuse, sanctions exposure, and security incidents;
- send transactional emails (verification, payment receipts, security alerts) : these are operational and cannot be opted out of while you have an active account;
- send product updates and marketing emails (only with your consent, with an unsubscribe link in every message);
- generate aggregated analytics and improve our models;
- comply with legal obligations (tax, accounting, sanctions, anti-money-laundering, lawful requests).
4. Lawful Bases (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we rely on:
- Contract : to operate your account, run Campaigns, and process payouts.
- Legitimate interests : to keep the Service secure, prevent fraud, build the marketplace catalogue from public data, and develop new features. We have assessed that our interests do not override your rights.
- Consent : for analytics cookies, marketing emails, and any sensitive data we ask you to provide voluntarily. You can withdraw consent at any time without affecting prior processing.
- Legal obligation : for tax, accounting, AML/KYC, and responses to lawful authority requests.
5. How We Share Personal Data
5.1 With other users of the Service
An Influencer's public profile (name, handle, country, follower count, ER, content categories) is visible to Brands browsing the marketplace. Brand Workspace identity is visible to the Influencers it contacts. We do not sell Brand contact lists or full Influencer rosters to anyone.
5.2 With sub-processors
We work with the following service providers, each bound by a written data-processing agreement:
- Cloudflare, Inc. (USA) : hosting (Pages + Workers), CDN, R2 media storage, DDoS protection, web analytics.
- DigitalOcean, LLC (USA, Frankfurt region) : managed virtual machines for our PostgreSQL database and Laravel API.
- Anthropic, PBC (USA) : Claude API used for AI translation, classification of public influencer data, and Intelligence Profile generation.
- Google LLC (USA) : Google Analytics 4, Search Console, Sheets/Drive (operations), Vertex AI (image utilities), Gmail (transactional email).
- Wise Payments Ltd. (UK / EU) : Influencer payouts in local currency.
- Meta Platforms, Inc., TikTok Pte. Ltd., YouTube/Google LLC, X Corp. : official social-media APIs we call to refresh public profile metrics with the user's authorisation where required.
- OpenAI, L.L.C. (USA) : occasional language utilities; opt-in only.
We review this list at least annually and notify users of material changes.
5.3 With authorities and acquirers
We may disclose personal data to comply with a binding legal request, to protect the rights, property, or safety of Keepface or others, or in connection with a merger, acquisition, financing, or sale of assets where the recipient agrees to honour this Policy.
6. International Transfers
Keepface and most of our sub-processors are based in the United States, while many users are based in the EU, UK, the Caucasus, the Gulf, and other regions. When we transfer personal data out of the EU/UK we rely on Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or another lawful transfer mechanism, plus supplementary safeguards (encryption in transit and at rest, access controls, audit logs).
7. How Long We Keep Data
- Account & Workspace data: while your account is open, plus up to twenty-four (24) months after closure for fraud prevention.
- Campaign records, Escrow ledgers, and payout receipts: at least six (6) years after the Campaign ends to satisfy financial-record-keeping rules.
- Public marketplace catalogue (handles, follower counts, etc.): for as long as the Influencer's public profile remains live; if a profile is deleted from the source platform we expire the cached snapshot within ninety (90) days, except where we keep an aggregated, non-identifying statistic.
- Server and analytics logs: up to thirteen (13) months.
- Marketing-consent records: until consent is withdrawn, plus three (3) years for proof-of-consent.
8. Security
We protect personal data with TLS in transit, AES-256 encryption at rest for our managed database, role-based access controls inside the admin panel, audit logging on sensitive actions, and least-privilege secrets management. Despite our efforts, no method of transmission or storage is 100% secure; we will notify affected users and the appropriate supervisory authority of any personal-data breach as required by law.
9. Your Rights
Depending on where you live, you have the right to access, rectify, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw any consent you have given. Residents of the EU, UK, EEA, California, and other regions with equivalent laws have additional rights, including the right to lodge a complaint with their supervisory authority. To exercise any right, email info@keepface.com; we may ask you to verify your identity before responding.
Specifically for California residents, we do not "sell" personal information as that term is defined in the CCPA, and we do not share personal information for cross-context behavioural advertising. The categories of personal information we collect, the purposes of collection, and the categories of third parties with whom we share are set out in Sections 2 and 5 above.
10. Children
The Service is not directed at children under 13 (or the higher minimum age set by your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has registered, contact us and we will delete the data.
11. Changes to This Policy
We may update this Policy when our processing changes or to reflect new legal requirements. When the change is material we will notify users by email and update the "Effective" date at the top of this page. Your continued use of the Service after the effective date of an updated version means you accept it.
12. Other Keepface Apps
This Policy also applies to Keepface TikTok App, a TikTok integration operated by Keepface Global, Inc., which collects and processes user data as described above.
13. Contact
To exercise a privacy right, ask a question, or file a complaint, contact info@keepface.com or write to Keepface Global, Inc., 1145 Amarillo Avenue, Palo Alto, CA 94303, USA.