Privacy Policy

CI Redtalkers (“Redtalkers”, “we”, “us”, or “our”) operates a customer relationship management (CRM) and influencer marketing platform that helps organizations discover, manage, and collaborate with influencers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at redtalkers.org and our related services (collectively, the “Service”).

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, subscribe to a plan, or use our features, we collect:

• Account Information: First name, last name, email address, and password (hashed).
• Organization Information: Organization name, slug, workspace names, and plan selection (Starter, Professional, Business, Agency, or Enterprise).
• Influencer Profile Information: Name, handle, email, bio, location, niche, tags, profile picture, platform accounts (Instagram, TikTok, YouTube, X, Twitch, Pinterest, Blog), follower counts, authenticity score, and brand safety score.
• Payment Information: Billing details processed through Stripe. We do not store full credit card numbers on our servers. Stripe tokenizes and securely handles all payment data.
• Content and Communications: Messages, proposals, job postings, cover letters, bids, comments, support tickets, and any other content you create or submit through the Service.
• Support Requests: Information you provide when contacting our support team, including ticket content and attachments.

1.2 Information Collected Automatically

When you access and use the Service, we automatically collect:

• Usage Data: IP address, browser type, browser version, device type, operating system, pages visited, time spent on pages, click events, and navigation paths.
• Log Data: Server logs containing request timestamps, referrer URLs, and status codes for security, debugging, and analytics purposes.
• Device and Browser Information: Screen resolution, language preferences, and timezone settings.

1.3 Information Collected from Third-Party Integrations

If you connect external accounts or integrations, we may collect:

• Social Media Platforms: Connected account handles, follower metrics, engagement data, and post analytics from platforms such as Instagram, TikTok, YouTube, X (Twitter), Twitch, and Pinterest.
• Email Integrations: Connected email provider tokens, email labels, and message metadata (subject, sender, date) for inbox management features.
• E-commerce Integrations: Store connection data from platforms like Shopify for affiliate link tracking and storefront features.

1.4 Sensitive Information

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and manage your account, organization, workspaces, influencer profiles, and CRM data.
• Authentication and Security: To verify your identity, maintain session integrity, and protect against unauthorized access.
• Billing and Subscriptions: To process payments via Stripe, manage subscription plans (Organization and Influencer plans), handle boost purchases, and send billing notifications.
• Communication: To send you service-related emails, including password reset links, account verification, billing receipts, support responses, and important product updates.
• Feature Operation: To power influencer discovery, job board matching, proposal delivery, messaging, analytics dashboards, social media scheduling, and brand monitoring features.
• Improvement and Analytics: To analyze usage patterns, measure feature adoption, identify performance issues, and improve the Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and law enforcement requests.
• Abuse Prevention: To detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (local storage, session storage, pixels) to operate, secure, and improve the Service. The table below describes the categories of cookies we use:

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using the Service. See our separate Cookie Policy for more details.

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

• Within Your Organization: Members of the same organization or workspace can view shared CRM data, influencer profiles, messages, and analytics as permitted by role-based access controls.
• Service Providers: We share data with trusted third-party processors that help us operate the Service (see Section 6 below). These providers are bound by data processing agreements and may only use your data to provide services on our behalf.
• Legal Compliance: We may disclose information when required by law, court order, or government regulation, or to protect our rights, property, safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, asset sale, or similar transaction, we may transfer your information to the acquiring entity, subject to confidentiality obligations.
• Influencer Discovery: Influencer profiles (name, handle, niche, platform accounts, follower counts, badges) are visible to organizations using the discovery and search features, in accordance with the influencer’s selected plan and visibility settings.

6. Third-Party Services

We integrate with the following third-party services to provide key features:

Each third-party service has its own privacy policy governing how they process data. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Active Accounts: Your data is retained while your account is active. You may request deletion at any time.
• Deleted Accounts: After account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., tax records for 7 years).
• Influencer Profiles: Public influencer profile data remains visible while the profile is active. Deleted profiles are removed from search results within 24 hours.
• Backups: Encrypted backups may contain residual data for up to 90 days after deletion, after which it is permanently purged.
• Log Data: Server logs are retained for 90 days for security and debugging purposes.
• Billing Records: Transaction records (excluding full card numbers) are retained for 7 years to comply with tax and financial regulations.

8. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption: All data in transit is encrypted using TLS 1.2+. Passwords are hashed using bcrypt with a salt factor of 10.
• Access Control: Role-based access controls (RBAC) ensure users only access data within their organization and workspace permissions.
• Authentication: JWT-based session management with secure, HTTP-only cookies. Optional two-factor authentication (2FA) for enhanced account security.
• Infrastructure Security: Firewalls, rate limiting, and regular security patching on all production servers.
• Data Segregation: Organization and workspace boundaries ensure data isolation between different customers.
• Regular Audits: We conduct periodic security reviews and vulnerability assessments.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, in accordance with GDPR Article 34.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to Be Forgotten): Request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another service.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent for processing activities that rely on consent at any time.
• Right to Lodge a Complaint: Lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights:

• Right to Know: The categories and specific pieces of personal information we collect, the purpose of collection, and the third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to exceptions under CCPA.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt-out of the sale or sharing of your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sensitive Personal Information: You have the right to limit the use of your sensitive personal information. We do not collect sensitive personal information as defined by CPRA.

To submit a request under CCPA/CPRA, contact us at [email protected] with the subject line “California Privacy Request.”

11. Children’s Privacy

The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected personal data from a child under 16, please contact us immediately at [email protected], and we will take steps to delete such information.

12. International Data Transfers

Your personal data may be processed in countries other than your country of residence, including the United States and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA.
• The UK International Data Transfer Agreement (IDTA) for transfers from the United Kingdom.
• Binding corporate rules where applicable.
• Adequacy decisions for countries recognized by the EU as providing adequate data protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our Service. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Notify you by email if the changes significantly affect your privacy rights.
• Provide a summary of key changes on this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

For GDPR-related inquiries, you may also contact your local Data Protection Authority. A list of EU Data Protection Authorities is available at edpb.europa.eu.