Privacy Policy

1. What we collect

Circlio collects only what's needed to run creator pages, track affiliate commissions, and process payments.

• • Account info: email address and a hashed password (we never store your plain-text password)
• • Creator profile: display name, bio, niche, avatar/banner images, your main platform link, follower count, and payout details (bank IBAN, PayPal email, or STC Pay number)
• • Activity: posts and comments you write, and clicks on brand links (tied to a tracking token so commission can be attributed correctly)
• • Payment data: if you support a creator, Stripe processes and stores your card details — Circlio never sees or stores your card number

2. How we use it

Your data is used to operate the platform: authenticating you, attributing affiliate sales to the right creator, processing creator payouts, and processing fan-support subscriptions. We don't sell your data.

3. Cookies

Circlio sets one session cookie (circlio_session) to keep you logged in. It's required for the site to function and isn't used for advertising or cross-site tracking.

4. Who we share data with

Circlio shares the minimum data necessary with the third parties that make the platform work:

• • Stripe — processes fan-support subscription payments and stores payment card details
• • Affiliate networks (currently Admitad and Rakuten Advertising) — receive a click's tracking token so a sale can be attributed and commission paid; they don't receive your email or password
• • Vercel — hosts the site and stores uploaded images/videos
• • Neon — hosts the database

5. Data retention

We keep account and activity data for as long as your account is active, plus a reasonable period afterward for financial record-keeping (commission and payout history). You can request deletion of your account at any time by contacting us — see below.

6. Your rights

You can request a copy of the data we hold about you, ask us to correct inaccurate data, or ask us to delete your account and associated data, subject to any legal or financial record-keeping requirements we must still meet.

7. Children's privacy

Circlio is not directed at children under 13, and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy as the platform changes. Material changes will be reflected here with an updated date.